last executing test programs: 16m46.950666458s ago: executing program 32 (id=491): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) process_madvise(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000200)="374f93756b6b4d60048243936e893ab9266705766050e5b514c240bc61c0316ccf6df9f32f9fe66c44c487c8fbd4df6ff337282776ce9678451a097f395be71e27e95407804853e3bc8a430f1e6a34eb702f385f7280d521ea834ec03f8f7afc173f3b56d78f970e5245e0ccc867b3c4d478ec550e658a7bde640c45ba3b1db1744a98ed084ea9167ff99acea08fe3d5b223a96c9fb4c89642babf80a9a152b106f17e4dd3ee044365bfc87a69fe4761fdb74d47f0ddb38fdd760c504a7dc92f2c7b2f72c2fe71afd23a30db11a7e8a94c3fe75934", 0xd5}, {&(0x7f0000000300)="b1b4a373202220f714b11e9fdada0e17fd9c67bf4da9c560630306d559ddd67f6145821e7ebcf9579d24a3b16bba8ec21c41eb7967532abf6b43561a60635b237dafec5ea46e2d5d406ed178b64da55cd57ba8ed5456278c4b4ef22531914c47457f8f38b3097dadc01fa9a80063c89e24b7b8dd1eb9122dd2cf3a1a8e7362b84912be3c9172b82d008729b4b69d59958c93ea3f484be3ce772df3e03f3567a148d7b8529e3ab8b752b5088ededf2006f037572d9292c6ba6f4e31491c066c4fa5466b6aeed082e092b6e24208aa9aea1caec11afb835ba70e697bfd66e64514af1bf629de6aafc53bcd", 0xea}, {&(0x7f0000000400)="771b69768c34c26c6c18f7ca75e87ee229666c7163542c4295d754c002c7cd10150d00e02896b741bd7bfee8a10ef41c85a4fefc952d0a9081932452c07049f62823ff85cd2edf07ecc6891e8ea5f5c13a6f3373f94a259e627abca2d18d62375352bc8675a8fb38b404c3b4dc9e3e5133fa191e71e9a21db713eb4c2553cd61862323c1169c6ae1de0f750fa28fcee46c115e2f6f8911fb2b8e497c6644a686dcd3673b8ca52dc6cc2bde9406fd8a059b536e58cd504c0079b7b33b7120227f26a1ac65cf9fb3267ea9abef7adc7e5d74576621f9b7918979b0eea3c355b29170e928d9e95589d422bbf20f", 0xec}, {&(0x7f0000000500)="c3ddcb846d6a6e00aa757f73e64ac0528cfef5985a8fe7be90922e843d272248f277f3f9ce82d1eefe891e8d416263f0cd8b3fe5660b31f4bb256a8a78696e6781d8ab4fba9fa93f59946e81f066efe1e221c80a", 0x54}, {&(0x7f00000000c0)="9709d8e391dba0076026aab7017592", 0xf}, {&(0x7f0000000580)="d01bf2044e0067f332e9416da4d55bcc860bc6fb892bc2e39a3d04712ae8c91d58ac1874d37b7919604bf8b68531364be21776ef52fbadaa3805856944351b27da36ad9ab354fb89722f2d9f1be8f16526eaf98dd381a509e100501628", 0x5d}, {0x0}], 0x7, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1009}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) io_uring_enter(0xffffffffffffffff, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 15m21.532667747s ago: executing program 3 (id=753): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20008000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfecf) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001080)=""/102388, 0x18ff4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r4 = userfaultfd(0x801) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x800) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000240)={0x3, 0x8}) read$hiddev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 15m21.432151332s ago: executing program 3 (id=755): creat(0x0, 0x10) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff1, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) 15m20.505967388s ago: executing program 2 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xfffffffffffffd17, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0xffff, 0x3, [@TCF_META_TYPE_VAR="995d00cd4e55f0", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="b38c", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3]}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) (async) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 15m13.470644473s ago: executing program 5 (id=762): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) syz_open_dev$vcsa(0x0, 0x8000, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x4000, 0x555) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x3d7, 0x8, 0x4, 0x2, 0x200, {0x0, 0x2710}, {0x4, 0x2, 0xb, 0x8, 0xdd, 0x3, "e31d0acc"}, 0xed, 0x4, {}, 0xfffff801}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 15m13.455329546s ago: executing program 3 (id=763): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000580)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000440)="a1cf11b697a0a52aeb050336e32ca6e03a87d6926d8d90ffc32765559a2a937cfb4c1ebeaac5dd5930deba2bdfc580e302676d8fb753c3c19d3c1de958120a52db56974a339f11aa2cc94e2e3228fcbe314b39c96bcf9de79dc282166995f16754127e5aecf04c68678f555dac655eb58337", 0x72}, {&(0x7f00000004c0)="b5eac4315528e44a621c903603ceecdd223fe453477727c708bef68501a1a546d37045036d281b4fbc7316bb729746f8c8d1e52501977bfca2e6471ae8228c7d1c72eab027ef18a446c3de6888c843bc8b3a1afc8c9fecc47713871c6b667b327a20ea6cf3f6808476dbeccbe33a3b331be73819cf07624df15b8a33b7fedb8dbbcfa72ca209b652c2bfd490f9f140f570174dddeff74fa47c73bb8bb4a6447f033c26b6ffbe262c", 0xa8}, {&(0x7f00000006c0)="ef3089d47d5a8c55e3c233fee28e384cf382cfc9ef41925af2d8e95970b90ffa0c7fecbbe1d859867e2f88e7ecbe32b75eeda9604d53d17124898c8481128bdc1e1db6fc15a1c1c9e89f4a5608d1deae9b156e86289c4f59ea037229837f8b7920f572", 0x63}, {&(0x7f0000000740)="f3f3c04ab54b04b94659813c2d4dfa8dff8ce4e692780bfd28d84ddedec2a5baf6eb3c29a9b92298938b93cf09acb3dc7e0bbf8c45e2e3e5f141b474be2c7a4582c80f0db55ca8f184848015e1a34efba36660632382d1bcfc59f4db4c84e71e457406e84c32b8eb47265085abeac7d15500b32cfc603d4b4ef18d31c8b9934b6ed814e35908fa884ef0060809bddfb6685b145114d5df53471b99dffc5400c8af6a94c34099934586d83726aad2f3581e60199a", 0xb4}, {&(0x7f0000000800)="dcb03ed9563cd61345b0349af49d30f5ec8bc5f40d0530c81f2d2db51bdacae2e430d38670a44000f27dbd7627c070b028f2c564f4b0248aa6a184f14ef5e4809b4ed9fbbad4184c05f58037a42e51ee04628ee08e8429dc8375902fdd330d5d0e0b21b0198761ed0c372b553314c4a008bb592487a84a9242a293aebe3f134e14ffe89d1229f59d0044e69a14eaf247429a757904d066e16409b3", 0x9b}, {&(0x7f00000008c0)="ffbec482ba874f01bec58ee0f6aed78beb8b90b3825a96809258576449e12e049cee2b010298e7cca3b398b67a024aa7f802249369d9b0be45d505351f0003fcfd4ebd66b779cf4bc5481ad164e7b43dd84cf2db6486ff5a2fce21b21b5e8a43c40f6e3252bc7262deeeda90373021fc9b14f766e4f5d832c992e3eddcd7a4abeff3b5c11bbfe54dfba0df6d0b1dad6a7f4655a0bb882cb423433d1934bc354eec21e28ce1f5eec92e7e17fb8446244cd772b8e7415cca84c459de5fe85821fe9f0bfeff6f0dcc4966023609f3bfb8c520cb90c56a0f5979d4b5bf7d5cb5e2b796d72be4da77db83beeb530c8a33f91447e4", 0xf2}, {&(0x7f00000009c0)="fe0c995191ec592fe90d3d6e71d2bbbb6aeb8d8f1bd458c9fed382f6b8041e03f6b59dfc4bc51ac4dd415097e8b36800613958264d4e43a0728be7263482b795d1a294808031a47607482d8bddf46548dd98dc388b58ce452cb560a4efd341e6cc5a7299c0eb8131c80b370f95494cd03fd284424d1495b804abbcfbb0579582d7675d29af43db44642c813ae763e9f415bd91c51400bc01c030ac", 0x9b}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="2c0000000000000001000000000019001faf9a5a0297164adbf3db71b1fba5dea3d7b6f4b854", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x4000}, 0x800) r9 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x1) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r11, 0x3, 0x0) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x4, &(0x7f00000005c0)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24040085, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000001780)='%', 0x1, 0x24000015, 0x0, 0x0) 15m13.255485121s ago: executing program 2 (id=764): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r2 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat(0xffffffffffffffff, 0x0, 0x105042, 0x80) ptrace(0x10, r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f00000000c0)="150000000100007eb4a4eb457549e332ba7a3be0a2b8ff04", 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) (async) memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) (async) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) getpid() (async) syz_pidfd_open(r3, 0x0) (async) setns(r4, 0x24020000) (async) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r5) (async) openat(0xffffffffffffffff, 0x0, 0x105042, 0x80) (async) ptrace(0x10, r5) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r6, 0x0, 0x0, 0x0, 0x0) (async) write(r0, &(0x7f00000000c0)="150000000100007eb4a4eb457549e332ba7a3be0a2b8ff04", 0x18) (async) 15m12.349551794s ago: executing program 5 (id=766): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x200000d, 0x100010, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) memfd_create(0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) get_mempolicy(0x0, &(0x7f0000000040), 0x1ff, &(0x7f0000400000/0xc00000)=nil, 0x2) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r3) syz_io_uring_complete(r2) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 15m12.267790059s ago: executing program 2 (id=768): openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x28241, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigqueueinfo(0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000000c0)=@rnullb, 0x0, &(0x7f0000000180)) 15m11.352484794s ago: executing program 5 (id=769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002180), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) io_setup(0x4, &(0x7f0000000040)=0x0) io_destroy(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 15m11.316070434s ago: executing program 3 (id=770): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00y'], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 15m9.949356128s ago: executing program 4 (id=773): creat(0x0, 0x10) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff1, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) 15m9.649430386s ago: executing program 3 (id=774): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108060018080006040009aaaaaaaaaaaaac1414bb0180c200d80e382f0c00000003ac141430bfb600000100000000001651f7ec06e651c1c89b05975967c162ec880ea4aa6901000086343e48be2a46d0e89877bc70261076df907d7400d8c660c9f455b380a260f72e64ec73841073353292eabf5a2867e667793a31ad6794077599599ff6c37132941a6a2a991638050e"], 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r5 = accept4$packet(r0, 0x0, &(0x7f0000000080), 0x80800) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) 14m58.482820347s ago: executing program 2 (id=775): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000131e7da6920b62c00000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010901000000000000000000000400048014000000110d010000000000000000000000000a"], 0xc0}}, 0x200000d4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x220100, 0x26) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000440)="e33f942ace282ca29d696a3f9d3835bb2d08dedbcb7492b92dfc159f32a9aefb943c6e49222d508db52c92e3ea5d76b7abf7b5d029655991fa120aa47c886c35aabb9acc3e41184030ccc70b94be2c3c0dc168457530fe8d81e77f5fee7511e94b661e5e3122bc79af3b5682ca1815617a5a84f41b07efe598b0bb1e48f8c20fadcf24ad289b47", 0x87}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fed3df252600000008000300", @ANYRES32=r11, @ANYBLOB="080022019c0100000800a10007000000050019010e00000004009300"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x900) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r13, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r12, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$DRM_IOCTL_GET_CAP(r10, 0xc010640c, &(0x7f0000000080)={0x5}) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r14, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r14, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xda6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}], 0x1c) listen(r9, 0x86e) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x300, 0x70bd29, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xfff1, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030) 14m58.460371863s ago: executing program 5 (id=776): syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) shmget(0x2, 0xd000, 0x78000000, &(0x7f000025c000/0xd000)=nil) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) rt_sigprocmask(0x5, &(0x7f0000000040), 0x0, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffff7fffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7}}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) sysinfo(&(0x7f0000000100)=""/159) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYRES16=r9, @ANYRES8=r9]) 14m58.241098284s ago: executing program 4 (id=778): syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0x83}, 0x98}}}, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001"], 0xb0}}, 0x0) 14m57.703127405s ago: executing program 4 (id=780): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0) connect$unix(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x400, 0xfffffffffffffff8}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f00000000c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x20, 0x33, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) exit(0x1) connect$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd7200fcdbdf258300000000000380", @ANYRES32=r9, @ANYBLOB="0800100100000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 14m57.322299851s ago: executing program 3 (id=782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0xffe4, 0x378e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14m57.211279629s ago: executing program 2 (id=783): syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x5, 0x542) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x9, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x20040010) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1, 0x0, 0x29}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f00000007c0)={0xa, 0x100, 0x3, {0x3, 0xffffffff, 0x403, 0x4}}) close(0x3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0), 0x1000013b}, 0x2001) r8 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000480)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000040) recvmsg(r4, &(0x7f0000000440)={&(0x7f0000000200)=@nfc, 0xffffffffffffff82, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/227, 0xe1}, {&(0x7f0000000580)=""/133, 0x9b}], 0x3, &(0x7f0000000680)=""/174, 0xae}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bond0\x00'}) 14m56.75490269s ago: executing program 4 (id=784): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x700}], 0x40000cf, 0x0) 14m55.93703782s ago: executing program 4 (id=785): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="18000000140001006ea107d6000080000000000007000280ecc03200"], 0x18}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r2 = eventfd(0x1e0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = dup(r5) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x18}}, 0x4000000) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026"], 0x80}}, 0x0) r8 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x800334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r8, 0x7277, 0x4000, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r12 = dup(r11) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r13, 0x54a0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000000c0)={0x2, r2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffffdffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) syz_open_dev$hidraw(&(0x7f0000000280), 0x1, 0x208002) 14m55.142600625s ago: executing program 2 (id=788): creat(0x0, 0x10) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff1, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) 14m54.792806519s ago: executing program 4 (id=789): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xa, 0x0, &(0x7f0000000580)="000000748ab90776aae5", 0x0, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_clone(0x84000000, &(0x7f0000000100)="57670d86e568f9422e2f86696503dd3d61ecc352fb67484c989075acb03284d32e7f7eea34bd58cb408e9b84f6c997705822e082b7ebf4a879e3df8479c4b360af9a49d995633dce2beddb386b400d5d39f7484952b701cf5e5dff8440", 0x5d, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000003c0)="8088ec32e217625b2249aca1882e7b4694c6835059fa329079e47786e95301f85fba6ac12528ffb777abdc0c3175967643b8e2f108ea29875552f9ec7efba8359c619b079abc0850b9494cb0991d51043d3d35ad8bc9bce63526f8f4b1e6e33a26d27bce8c0095c426778cd62c1ea6ad6c4f4cae652b765aa7061e75dd50cb8b2f52bb38825c490beaea5516b06addd035379ff36504c155684f490c17c5d3246c2ea4632ef698b0bac279bd2002e72180ecd15f11ec5d012e1cf221f05cc676d6efc002225a6f3334b2") sched_getaffinity(r3, 0x8, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) 14m54.505638793s ago: executing program 5 (id=790): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)={0x2eca2408e813c6ca, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xef58}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x271) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x8, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0x6, 0xcbff, 0x0, {0x5, 0x7, 0x29000000000, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xfff, 0x4000, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x8000, 0x3}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x1, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x1, 0x19, 0x400, 0x65, 0xfff6, 0x1, 0x33, 0x0, @private=0xa010100, @broadcast}}}}}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 14m13.116799641s ago: executing program 33 (id=786): openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x28241, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigqueueinfo(0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f00000000c0)=@rnullb, 0x0, &(0x7f0000000180)) 14m4.129849044s ago: executing program 34 (id=790): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)={0x2eca2408e813c6ca, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xef58}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x271) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x100000, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x8, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0x6, 0xcbff, 0x0, {0x5, 0x7, 0x29000000000, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xfff, 0x4000, 0x11, 0xffffffffffffffff, 0xffffffffffffffff, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x8000, 0x3}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x1, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x1, 0x19, 0x400, 0x65, 0xfff6, 0x1, 0x33, 0x0, @private=0xa010100, @broadcast}}}}}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13m45.131762103s ago: executing program 35 (id=788): creat(0x0, 0x10) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff1, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) 13m34.659192144s ago: executing program 36 (id=782): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r5, 0x0, 0xffe4, 0x378e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 13m34.131253409s ago: executing program 37 (id=789): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xa, 0x0, &(0x7f0000000580)="000000748ab90776aae5", 0x0, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_clone(0x84000000, &(0x7f0000000100)="57670d86e568f9422e2f86696503dd3d61ecc352fb67484c989075acb03284d32e7f7eea34bd58cb408e9b84f6c997705822e082b7ebf4a879e3df8479c4b360af9a49d995633dce2beddb386b400d5d39f7484952b701cf5e5dff8440", 0x5d, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000003c0)="8088ec32e217625b2249aca1882e7b4694c6835059fa329079e47786e95301f85fba6ac12528ffb777abdc0c3175967643b8e2f108ea29875552f9ec7efba8359c619b079abc0850b9494cb0991d51043d3d35ad8bc9bce63526f8f4b1e6e33a26d27bce8c0095c426778cd62c1ea6ad6c4f4cae652b765aa7061e75dd50cb8b2f52bb38825c490beaea5516b06addd035379ff36504c155684f490c17c5d3246c2ea4632ef698b0bac279bd2002e72180ecd15f11ec5d012e1cf221f05cc676d6efc002225a6f3334b2") sched_getaffinity(r3, 0x8, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) 9m18.122794796s ago: executing program 8 (id=1339): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x2, 0x9fc, 0x0, 0x8000, 0x0, [{0x4, 0x8, 0xc7, '\x00', 0x81}, {0x4, 0x4, 0x4, '\x00', 0xc}, {0x0, 0x8, 0xf0, '\x00', 0xd}, {0x2, 0xe, 0x6, '\x00', 0x1f}, {0xf, 0xff, 0x2, '\x00', 0x3}, {0x0, 0x3, 0x7, '\x00', 0x78}, {0xb, 0x6, 0x7, '\x00', 0x4c}, {0x6, 0x2, 0x9, '\x00', 0x1}, {0x2, 0x8, 0x40, '\x00', 0x6}, {0x9, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x9, 0xff, '\x00', 0x2c}, {0x6, 0x1, 0x6, '\x00', 0x7f}, {0x5, 0x6, 0x7, '\x00', 0x2}, {0x7, 0x10, 0x5, '\x00', 0x9}, {0x2, 0x8, 0x4c, '\x00', 0x7}, {0xe, 0x5, 0x4}, {0x4, 0x2, 0x4f, '\x00', 0xc}, {0x5, 0x4, 0x2, '\x00', 0x40}, {0x2, 0x6, 0x8e, '\x00', 0x81}, {0x81, 0x0, 0x12, '\x00', 0x8}, {0x2, 0x2, 0x99, '\x00', 0x85}, {0x6, 0x8, 0x9b, '\x00', 0x4}, {0x7f, 0x3, 0x7f, '\x00', 0xd3}, {0x0, 0x8, 0x3a, '\x00', 0x5}]}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xffffffff, 0x100000, 0xfffffffd, 0x1, "0040001e1d113c947f5d6000"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x3, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r7 = syz_open_pts(r0, 0x0) dup3(r7, r0, 0x0) r8 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) 9m16.50337765s ago: executing program 8 (id=1344): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb080045006edae23f92452c00000000a656cbdea8e42d09000000006558000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00'/17], 0x50) write(r2, &(0x7f00000002c0)="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", 0xfc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 9m15.368110706s ago: executing program 8 (id=1349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 9m15.207487069s ago: executing program 8 (id=1350): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x88}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x8, 0x3, 0x1, 0x8, 0x3, 0x7, 0x5, 0x2, 0x4, 0x6, 0x2, 0xa, 0x5, 0x7, 0x603, [0x2, 0xff]}}) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64d9f4d4938037e784f869526f9aff94890f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x724dc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r10, &(0x7f0000004580)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)="1623b746c0b010058b37661c2cd98f222eac7997d0d90ca080c8ea71d794ef794674093bdc615a4bbf10cebbe28c1b4fbe6f4cf432229407214a237e9e0009d409045834f6e7b30d91fbf5e25cca4c4c62fba5f2dec3710eb751931ad9a8404e0a45fe063574f3125b7882f7a3c910663aefaee86ca559614cd66c4773506ed03b6c0ffcf10c4c59a2da2a1bf7b86f2fe77c79c6ad25", 0x96}, {&(0x7f0000000540)="ad88eea8aefc888b3e92fc926cf2a6d91d5a3705eb4da54375a51978a3", 0x1d}], 0x2, &(0x7f0000000980)=ANY=[], 0xc8, 0x24040085}}, {{&(0x7f0000002000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000002080)="efac2a481b71c21c70f6a125884225111a364cafeeab219ded571c9636e50aaf29b2718c901f1a6a681148f826ee46ea65fe32139f74fa96de8d2416a5d80e704f3bf58f75b6e8638fbb45e2b463c82c877d81c606b4033419ea6e76c11f3380606dcbce4d71011b5fa3110bd15215d7a8d8a5045a2a6ddfa417ea2623e8af5567aac5a587458690ee", 0x89}, {&(0x7f0000002140)="ad29c8361367f3957732e28b085d9e7c1fe3a04cc1086157fc96ca71f9ba7d1c8e21c846bc177c5b9ff2dc61375339bd5aa1da7b448e9516bf17a38c196676c3c170a6d01f4e684ae0feace87ee20719000bf3f357022a95fa4b8b41010000000000007a00"/117, 0x75}, {&(0x7f00000021c0)="6532b11b54ad34380a9c35e951d8249a7e0ff3b376972df062993a1ad17e65ce7caef7", 0x23}, {&(0x7f0000000500)="6e8cb0192b1dc76f3e77fb86252b4439202f5773caf8c44edff5871f28bfb49976fc4999", 0x24}, {&(0x7f0000000840)="2793cd038d0ace46e8d92dc8d1d8ed8cb52ec31cec0149b46db7c5bdc32a2cd29aa4d009143c6819799c0482f8fadbe2a5f031a90d", 0x35}, {&(0x7f0000000880)="b935684c4a212bc7c3487f4339ecd9330c34b4aa13cb8dc47d37f9584a20050000afc630ecf4dcafa0f7fdd8c32fe439631b8c0f61ef8d89d2cced47", 0x3c}], 0x6, &(0x7f0000002240)=[@rights={{0x18, 0x1, 0x1, [r6, r6]}}], 0x18, 0x4001000}}, {{&(0x7f0000002280)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002300)="e28360e847678e47576e675fbca54b0e0b8c20b4c051f1719c8c7541c85965b5055429fb69ba870337a047611b405539531c8e196ab182ac7a8f2bf007a840863166daad7764367b2d1af9f24605d886e1267fa2551c59daf9b1041cf4bba759e361478e7ca6e312de41104d43f2eb53dceb2185b3776a3b09763196bd97d30d1155ba38897b34439a1063ec1128a76a4c44e29af4f11d8012ce23f04bd8e5c4996823996c4410fca584759dddd1e16b83c4f046622e61ee7eb65874ee50a62e292cb1a73fc10f5ff36d9bbdf75961b36e5147690ae0b246aae40a19720526f5f761e5a15143846470fb2964e15972f4c46765c6fc86be712efff0ff", 0xfc}, {&(0x7f0000002400)="87a169a4d863bcc0f176b68896894709070d2b7b87d78d51f346898107d4b63c299b30a3c510cfc140ad921beaf7b0bcf5714a37dd5e32e60e80b8664e151e746f23c2924f389e32e219465e796109c4", 0x50}, {&(0x7f0000002480)="71acff8c3cde54d21f531cb3e57c9dcb4ca38b0472c085bf578c627a4b950bc7d7f5b844dcf67ad2d78780267df4b07a67406853c32b446bcd2e2c8708ccc88eef4d", 0x42}, {&(0x7f0000002500)="5d761e9bcbb53f22c4f86e0d28560c6e781f04ab85289f11a21e3a429fddfada27bcbd2702b74348a52df36ac166b196acce7c6340f2d158bf2f3420a5ff42eba4593ff9ddbe9821c34290707253286aaf4c77086f4b24207ba32b99f03d872dd53d9596a774d40de88cf257c86034a190ef93ce6dae0f43cf8b021cc0c709a72cf8dd78b9338ffaee9e20b1714bd10620b7fa9bc3144edf39630780ddc102939321f602b3407c7e8236af04978bb42a994f9226b900af67c17cc6404460006277df1fb08a170105a7238a2bb9138dd4934cbb32dbf967c1f109bd800df4", 0xde}, {&(0x7f0000002600)="471497c133f2c7d660d0103e93d2f2eb003eba705bd4d76d0d3933a33c66b21ad419786f10e1d18dc503eb78106245afe7682a24209f40cff8f50366c8bf45", 0x3f}, {&(0x7f0000002640)="69cc0a6bf4a29624914e791e38d0eca022001220d8c5de6a15ea6da920338686b5bd2b0b0566026e08242a656470a87d7d6f67544731e8bae3c7c505354e83d259b2337378554090ac7c39b9f6c1221f474807bcbd543e6cfc3da95c81d7699a99949a701395436840e58abc52fd18b104c2140dc83b44d69b49a8d2214567048f4a5be30db37043e99b75001e4a2558993f923e2e5136082a209ea30120f1d92e67b539d1210913d29f11024665811a1dcdc3069236915d", 0xb8}, {0x0}, {&(0x7f00000027c0)="29f590f359d307f42666a2000f75409081b5eab6c0fb6d84173da06b8d6df19caa88f98e16146da11ce2a89e6d7cc3d993715808355985f9b058dde4bdac64290d316032e8b6e7023439e6594e1ba59a25f1cfb81a9bfd364064d534bfda15eb67ac404e7121c20b47e166ada84ceab6a621e9c9cc0fa73384115dd34d853915b8", 0x81}, {&(0x7f0000002880)="7170f465a28a4410714ade19a21c25744e24f4509fb99dd49e2f9d5bf3b811f879fdc14ad3e7edccd39bad3934a301bfe34230c1a75e63cac78245e41f73bd9556a7131f4f450f18dcc6be6627a1964b4add4f387f", 0x55}], 0x9, 0x0, 0x0, 0x4000040}}, {{&(0x7f00000029c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002a40)="05acb519c54a366aea6cd726096cb4325a6e102b1573ed789331583b14eda2c9365fec4ed76dbde5ac640ec8df0c9aeca98d4ce48cbcfe357670582d90f2aeca61bf6d8129580ec602dc24f33180059e77bf0ba362aa2415bd4e8d3a2ad4916179911ba29aafc7396e34dd217458ce986a25f9aa487970fa5a9757df215df3246a958cde1dffb5a3623d1643e67f5016347f0c354f8dbd40645bebfe8afb29c6591399470b3d0d75ab897876d929748629d9e4920e8fc59f", 0xb8}, {&(0x7f00000006c0)="77e80ebeacca15ef6e7422c8f614d0d3a9a4c84be2a013a72505f326b3c9bfa35d23c6d60066274b1f723908eb78704b9f90a00e14034e5a074458a676d44a13fd3ca59c8cbfcf8a26a2a1b9ed966a9a725dda65ff13a12fe2c7117872fa4d8e89df4aa2c462969e25e3c2c4f00bb2c83ee9ce1c96531f61267e1a249382854be0a8726c893a8020ed724151147a2e9060c90f6e20978209e6e99fea078078f8a687903755bc54c92154d3642297c015693a7eaa1db1f60db84f2a20672f5fb71065e705497bcce6edb281a9fa7f3ae25e42cfb9d91d79f1a91e69d8922e00e59b25210750", 0xe5}, {&(0x7f0000002c40)="c980493f76f3cffaa41d11ff1b443e4374e1c84ef49bd497c210e2318a2d805884f18d6fc34f24915aa9627036d8384031702a99e2307cf14e85f758a47f7a7763", 0x41}, {&(0x7f0000002cc0)="49e76e9510b51909437193c05efd3c182ae8742ed0ac6ff6066bffbe5568c0a83200ca0f4149c5f4728ce585e3eaaf3dc8fd3c255dabe43215ec771eb98c9249939ea2bb10602b893835702da014288aced3fe35056ce011537d88715ccb18b451ccae1aad232aa244269a28", 0x6c}, {&(0x7f0000000a00)}], 0x5, &(0x7f00000030c0), 0x0, 0x10000090}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000003180)="8e714aa66cf2b5c8e7c75416f180fa22f65532a0491abc2e7c75cd6cc54e0af8cfd67aa42ee2e18301c245312dee58939090eadf99a98c7362d16b2f91336e0e3da0ee4750155c180989fd347d01e3edcaf4a9875a6d6309010853318db334f99d3320081887eed94e7a80357c24457ab363d2cbce0f8297e7b08a9f1e1d1349af363776f3b154c308766c07b6dcd3a054f54614f1ba195ca5d431d7a481e383ff6893b81871afaa173f5c9408aecf1ab1f015041ce9fad2cfb1bf5a1cba809d8c9a937f07cb148aa945521fceec0df843ac69321f7c958d9b27e01fa5919db3635e150dfe55630bd39243b8ebf0951d144c742ed581cce83d6bcc765631af5c9e8e45babaffc1a718562b97a8d9472c7d9eb3946c616441ae6cab3ec52e48f85f1cb2dd847c2fa9a59a2f59ff0ee2a89b8be7dbd0b81a16f32f62595ab8bd2c92c69556c0abfc09fbd32e364746853abc584e1171f25a83b232e414942d9a5fba6b2b2114a722c75efbd453acfca4c0d17dff6c4b77a5ed5a8f9cbcc5d1ca0748fcaa5bf51bf339de83bf37c24bb240ca6d4cccb11d489c6f2879405b43ddb8dbbbb9326e14d282c5cfe16c13f797866cb1c4c6ddd06a56c52b24bfc41928b5425e0c2f79fb81803b07a07db65504cfcfb81178eddd21094db67cf41010ff33857e80aa5ad20200e6e09d611c8d6be33fcc4fee8f1f74619de751b21111d28b8efa585e0c64113933b5be380358e9b12d0db3df441728af754696a9e251f8623b065abef321c44bf05de8a4f94815b5bee723af9c10d44a89436cb2a535b4990d13475f634761c4846d497bdecee21da09f109e11fbc494de2bba5f4c72f913ac07ffbb0327bb414b0648d5948e5091b4ed0b753bd0d59e3d2b6799a2b6f473964c222d4e2dfaa6b09fc0c9ab1e655b9832db4304818e550a49b2516b3159f0e1b8b49ce20e3551256d5df6413e31a8ad8542149fd11ed48b19016f2048f135b98dbadd4dcbaab8d04561a1e40a94db181529da3ffc936930c5a6be9ac99eb306062e052a42a02a80b9be32d0e3b15429cc937265742fa8d417b741e3ff106a4bd385675f3eca8ca0fa7c5a61e12c837ba3ff75480736e0ebf310daf384f5754cc18dbbab59a1d2f5c7656495ef493c0ea5387a3a89af5f72d07c8e3697fb7814d3f52205001ba7ddcdfb57a33a52c9e682421de02f2f9e3051e39fac8e2b80abe659cb9ed3a2dcea0ac26239949f76b15f9b6b1c68696aaef7450d03dd86b0ad67ca90f16b797b396c8467a7845f8fff7e27f3e56943eed612f91b82694af7212e899bef008b8a283880fa98f06b164930ca268f3d92e7840982f224db9dec13d8a656bbc1997ccf5f6dad6bc408c3b3b8fa0654f2b905476d022673af12dcd8c2701ff6323572ecf0fd69094d09692152d3e02272df1053f9f91976ad9b8d0fe2fe028737f6f478b683cb397a857d1c10996238c9948fb7c5ba417389966fe188d27871c98772e78b70c630f753c42e5e3a7b98cd62ee8872bc75759522cfbb8f50934c3d8a953f0f32991ca27b3b4564c184417a61b98e2f7f0d6975c6e0c43ee14e81f2696354ee89e6f7953f598e5fc69ee2c783182281b3a4b432f7db7c0c1d8f8de0b359c7969b3f5519934597d01767a0c6b503bea51f299c5c1d6da347dd8a3a472dc85b1f8dd8e96486eb9732cd9b97b3946ab5e398cc6d9103181d48ebce4e4b7fddeeccdf1780756d52d91f4de2279160d6a837f80f645f389f0fd6e548334e996aa50837ad44d80aab0eb30675a1848740bb9f41699b633eeb22d5efb6ef57c3047db1f03b58a856481251f69dd3a50c810e7926a3132bb03f0ad7ede72ee38265d518669e4c0765ae840a6311750433b7388e490a8fcfab5acb5d6364be38f7e3a847a48c5827e94c9b4f01b5077be65facf75115992c0cc70ecacb21c30b0702b30b89e1ee95f84284c3b42956b8d3545665c97d6aed0b8c1b1c1a72f7849978e087e54994fe6f0680b48658193d4025294425d2d65191a8188df21d67bc6d93d0bafdc264ee2504efe564beba6ae65e1a3fbf3a6614e431d2f0fe6b6f39907f747845d1610c07b577b8b40736b7b52dd433dae2f407251abaa4af3f4da10c99432c9ea093c4ef371e36c9cab1773d6f7c9e23b9168fd02cda984ff6752c0faf783b99da590779871bedfc7ef3813f470effa31417f6946921b9a8b15f6c22dce07b2791671cee63f704dd41d9e8e8c9d3d73fd94d5ee43d71f4295943aa771fa836f853579938cdac9f3e85d69d494bdca2601b3af4b5f82e995188edfe705e1530c28b8f1faa29d7a82d04ea589bbec76d4cfd6a8404d9ca563c25f3dd2bbbdfc62bf975beb139ea5597b23f5a7321eb9cfd5bdfb7cd2a95d147d295a3d380355bdd4174518dd70cda123497c875fcc250c766382bcfea42d134e6b123cd3a4ca325b6cfa66e7390988ee032f252b300281cfa0458e783c1954842e8ea107dc4707330fb884cbdead10b500503a4cb3f62563bfdb131927ffbc10311df3f998f0a760c1d9c7b675fa733e6aa0a96c4921008066b5d1f96cf07bb4aca725f2e14ed16248984486d896e9cd043c043ca13d98a8cf1a0bcfd39dd4d109073528ed20a8584b2580af3f17869caddcbea32beea9f93b695845ba29c552ddd9aa2c6fcccddb8c3903cc74a2537252ef97f7ed83bd4d5b73f5eb500c58f5ce86cbd71d72e0c9805cf3388e42d68b12a2695634928d0bac821187d974eba55eb373d1b688f285582c803687a97864f4e7b0280778770766e81199ca1d8fbd5409fcb29074c31b5fb306d53adf7fb8a9e8477239f162190a3da32898fab0a8665cc6b323ae672b0f8735e683848ed617f291039c1e94249828d30644addee730c739675853c25bb2a23b52177e3ba7b6df83d59d94e44dd2102ce4d585d13a3203a890b3cd8e26a127213964f840ef1017fa03462eed00b2baf9e021138aee9714f5a86f6b2791e50e0d7da3402a8ff87cee3ce2df5c49b138284e48b406edff6ed7a636e58c4f99a2f1da0489f1b49af1de2b0c6a0e1f4af57fa5d81f3d7979250d560faffcd3cf2a5a356badd076844d036914917075af7e90ca57d0d86ac5ca1463d99427b285401eec51dd5d391f334831abdc9ab634a38c13202cb1f744dbfda17b13913009518aaf044cedce62ddc5e929654499b3a000a37aae91cee68ca3f57eacb10964e55141dde265d4ae0d8ed56ce38415167c59ef4397f1a830453a945959e2ab79b0f643d3f5c12863c827059c54ca25de6f90df8f2acca6b9e3b328afdfe0513838f755fe5e73d469672ed893359d2e6c2faf6d42c98c6f7dc11fc64a4d51ecc94776c89d41d89b4ec161a9ae94ded76d0827357d6f606badfc76872d9a402e1388eeae38bbf2718ea8db10d74775e2f56b9c6eca703e9e5bc0f4bf79eddc46b79f7c583cc1dc41a57d51ae939848bbfdcaea3dc3308ee97dc975f089bce9bbab201ddfd1de7d8647847d3052838d532bed85c91617303b12c95fb7fe79b826ef486000c5739f04e6ecd3db253850fca40f4ceaab6d32bc452eb4e36c0a2ec4f6b6e89ee65139a4615fd2d8980bb86d8b866d3ab6b997c49811df356e6f78ec4196b2e188bc0cf69ff06d320cd06159938b4ab06153b32522607ab78a5f7029e8e544dbaefed3669f0165ed2a01f8ea9eeb518040af06da21201a4286fa509ca5a21622e1c19f94620ec4bbe4ee71fa05ac5dcb766c3909527838ba0d60e08189985a3eb3b907173b21c2141c11d8123e307db42419f6348537398ede656e171a269501671b6f5ea655d43ade56ee9ef1a17fad7bc7b07356ab25b119cb2a3db9fb488d8dfdb077666bf668cfd5f6aaf3d37e5683e8bc6ce51f2aa425dec317062db79a4307dbdb3ce0f46c220c88f31c6eee481ff2ed1829e442d37b121c1016fe34a8888bd3c6f95897c974dc8fde338781306fcecc0f6e75c3bc7cbfce3dadaa62cf0813e2a6f7d0438b120915ad8fcdb9d30e4ab341d28d91e845ae006aab1e2a5f0d5f221602f849942ccee933d9f988bf7a30bdc9f332f6d489eb0b5ddff03d2f72a683a4d7b00587360b1f67190f9169bae379dfe9aca31e05c799fbab0bf021b13784acc1898dc51ed796cef11a67e969705fc10aee4a71f40c73004b35866c1297ee5f9ba41fdcc47b83da46b983e7cae37aed1fc61c1e883043b7d6786a0cef4452ff44c854c445e8a29735e130b5fcee595e63ece313f300041a33e271b712865a4b05c03001eb9bc1c882a28c821a8196279c21a06e4a0e43308298c71b09fc3492858b92e66bc3de09daf13c07d9077551806f4911866e982afe5157530eed450383dbb626300a12ea2b336378e6484f0560579841f4ca2004e5efce7f46ad5f9a3ea668c720a69aa479f808d5bc300b7744b7dba5ae5b93dfeab2887f10a3e52f29c61b9ed0424896d44d3af3d90a7b1bb6b6f563f6aef7510ddbe12a15c7da19c046deaffe77112d76f5cc5175646cb70d3c3108148f017fa435f606e84ce6eec260db7483ece701fb9cc5d71b19621f7fb5f696d71508397c6cec65b96a77ecebd481f10d0a2a59542433d079284db5778d725225367a2c2f902fe46f03f5947036010f35cb12424aa1a695c108badf724f4f1e6759b2dbef27a3f39d79e04c7d605c7ec5389d44e2023632e2ba7f9b3dab3caca196019805138eba05897eebbd76c818f78d199c0e7cb7eb4bcb5a3a22be8fdc0503211907d2cdb670b2137be654c3ca5e8dcd4c73d427ee6233b5798e8179e3d93cb6b1a2ae908161800704cfdc8150722e29d7676be2f83ddca35394ed82885eae7fe631470c4307cbb172fc0a32077d1c5c772eb7aeef64c919ac97623f245dfed1cc4ba144c9a0a78a6fbf46d05dc70db2db693cf56047a616da21c945656f9f4ac70228cc488daebe49df753d2ca1e68c21391dc6a749333a51898ef297c896f5d5554455f5180dc50f3ef5428139cc057b4697798964bec50082caa7f50ba8db5d77d11dc92dbf685683821c0389fb23f995731f7ed71866f012998ed4bf08f073cd5c0f257735b9b453827f8295442d377935c98ba85ed7e2c8a09abb18fb974d8e7023ca7196065ffa52b06b77c6cba3cb9454d84816d9bfad86c31dc8a1ce5fd53aff31eaa6c64af51167e5a7b73681b2eeb66998e6d1876418fe17bf1a591828cecef1d572e0373f5b03b28271889b19a4bfe28b56d121ca945c36d1ad114256fd26f58cb463484300295fcaf8a34bb4447700f9bc1ecf278aec7eb95aedad9df1ac06143cc530a03d5825a7a8262f043d1ca542f8ca74f0c4e933db99479a0d1a37dc6f234cfaa8683ee10ee9c46ccb1195db6974b4c24b7ffd67103b4bb9b13cae51d64bad97715e4f2bd1f2bac6fa4da838d29fdee80c8a28e3289224a06671e8c8d95ef552d4949a8bded96244a8013c884db4fb2141d5e494c91f605cd7992a388f9de35818d9afc0863b4de1ff2505f4d33c7588af497127c52aa2badb6f97f2522863571ffa05884665f6a0521b6dd1ec5a31f3f631ce098bb94f3ba54198bbe307c29f0e3c31f5a4c8a65794d0ba0acd2fad02e5bf2708b5a38a907de76b30a49ed2b7869e5ebab49ee985168edb9939423de1c9cce4028c81aa45fa44c5d880f0b0eeaba8db6eacd322451980e9d9d2c7805a2e22b5b6c4279e676610702471046bc68f32cc664028006651ac099ca578dfe46cd79c9cefd0b6000e1fdb4672e3e474091bddc464c316b4f6a6ace5f", 0x1000}, {&(0x7f0000004180)="f50b6c3aebb2cb9bcffc68635d790d9ae6d49b6cad9b4c36dbe2d29220c03b08ed1d72c5322d4aeb7990df6448602c43a2684571e60ce8ab6e451228ee754ae6612b0ceab795198b5c31cfe33a44b83091acb5cfb12e924482deade6f0", 0x5d}, {&(0x7f0000004200)="5f0aedeb48146e9b3fc6140d517a61e958665c4535da8f0b8716ecd411acafa9b3f98f74af13c1624d7b8ab2ba0d38fa765962aaedf81575634c2bfa2478e4e704e49ac175c82eeceb005c0b63fff8d32f331b29bb9c3035d24b0be5ebf6288150799c09a7905fb5b13d882bf5cb2febfa521e548285cc2a81c26030b7b4226365aeb699e03616", 0x87}], 0x3, &(0x7f00000058c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="84dd6a44c25ef67b85237845b0d09a1bf6a8dbf34657726ecb12872865b15633c2c9ddb5ce0e0b56e60f3c0c96a3adbf4867accc3534e7f863d0e918c4466da1d08b5f1e8d4ee80328dd9b7923fa4e05bb36c43e3972be4a3dace3b7176235a8c5f1d41159310b995e10041cb86d90f1abbf95fbbfc01c2ce7aa84454d6f24d706257d7bc3e8b3f8046e0086afdb272df261489cbc2e27815b3d432607c4da9093fca8d2c6cd3086c23d19f9c6f5b1ca0bf74ae7d39f8306ed20e801a00a2ae360aa86c0565687ee2345d87c7e512d022f2c", @ANYRESDEC=r8, @ANYRES32, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0000000028000000000006f30000000001000000", @ANYRES32=r4, @ANYRES64=r7, @ANYRES32, @ANYRESOCT=r10, @ANYRES8=r7, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=r1, @ANYRES8=r10, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r10, @ANYRES8, @ANYRES32=r2, @ANYRESOCT=r5, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x80055}}, {{&(0x7f0000004400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x40}}], 0x6, 0x2000c801) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 9m13.587749709s ago: executing program 8 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 9m11.959758318s ago: executing program 8 (id=1358): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000010000000003000000280001800e0001006574683a796c616e30000000140002800800010003a095e6d750a016fa13b884"], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x55, 0xe7, 0x64, 0x20, 0x421, 0x492, 0x49fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x2, 0xd3, 0xc0, 0x44, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x2, 0x2, 0x8}}]}}]}}]}}, 0x0) 8m56.71473096s ago: executing program 38 (id=1358): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000010000000003000000280001800e0001006574683a796c616e30000000140002800800010003a095e6d750a016fa13b884"], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x55, 0xe7, 0x64, 0x20, 0x421, 0x492, 0x49fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x2, 0xd3, 0xc0, 0x44, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x2, 0x2, 0x8}}]}}]}}]}}, 0x0) 15.174389092s ago: executing program 1 (id=2917): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x2, 0x4) close(r1) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0x0) write(0xffffffffffffffff, 0x0, 0x0) 13.119389098s ago: executing program 6 (id=2924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) 12.609014815s ago: executing program 6 (id=2925): modify_ldt$write(0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000000)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setreuid(0x0, 0xee00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x10, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="18020000004000000000000000f10000850000007a00000095bb1b9d8041bb0c0e22609168265701ece632cfa19fcd64cb94d7deb2b00739763964e35f52404ff921c47848cc1ed9963f59b817a01d02b856e1ab6497a8560a09de0285053b6d867699c5555a0aff2f2381f47f46bacb7d915532daa1ac52d117abb0f13faad15f25670aa7e0756429580ac8305e4e4fac3e6515966c4d43f2aab37481000000d20881"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="75dc", 0x2}], 0x1}}], 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) syz_io_uring_setup(0x117, &(0x7f0000002040)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_open_dev$sndctrl(&(0x7f0000000440), 0x9, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001200), &(0x7f0000001240)=0xc) 11.03999095s ago: executing program 6 (id=2929): r0 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.95216283s ago: executing program 9 (id=2930): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x20004800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000020000008700000085000000b7000000000000009500"/104], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000300000000090584", @ANYRESDEC=r5, @ANYRES8=r4], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f00000000c0)=[{0x4, 0x3810, 0x1d, &(0x7f0000000280)="d74636f93b3f95a325abd350940535fb9d39378d876ca9280000000002"}], 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r8, &(0x7f0000000240)=[{&(0x7f00000036c0)="7d09dbe640bf9169", 0x8}, {&(0x7f00000002c0)="7794aa6fde076f17baebfa46123089f865ef3bb07dfb50afbd9267b1954a9ca90be5b079e13fe10a25256b8e5ada738172399dcfd5157ada26a10314f3dc7fbb570fc1471d8a6d885f70b055abd40ade42d87be1abcae749139f1834b139d1f565a4c412f5b68471ede406d4dcc46e7059c7a88c491cc851ef509b81699d73d64ef0178d20bee18f8334f7218b458a11fe195c8a77be928e3295f874761fd42bec042564e485d332e5e458415d92c9d84dd552f3a23be3f0d11d471a", 0xbc}, {&(0x7f0000002680)="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", 0x140}], 0x3) close(r0) 10.5795129s ago: executing program 0 (id=2933): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = accept(r0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r10, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x6, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007baa00fe000000"], 0x0, 0x9}, 0x94) sendto$inet(r6, 0x0, 0x0, 0x20000000, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="7ee4ebafde"}, {&(0x7f0000000780)="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"}, {&(0x7f0000000140)="8df062a855b7db733a2350532bb9c969b5d2cd824c4f8730f9ee5c23ccc1ea63356752a831ecef0ba8afa0cde89ef072b93505d3231075a5791a934e89055e5d13af425773e1f99f70a68a64364882934cc4b09403c1816898a6a852c8"}, {&(0x7f0000000440)="7e1839713b3ab70dd6d5bf6be8d3a1fc62846ebcde443bb4a91a48433505ccd285cd6f2ef557d5cdbc378e2d1d6eeb8f5ce2fe3be2ae3d9f83e219fee5df1b463010c1b139e2ada263c825e7f32f16c2e68719b2168a98a21b506b0559df7b578dc785c1667394397be4380b6af5aa2fdd4afb7c5b296269243a1961296cc7adbb929f20d8307ba2e213830cc1cce35b52220eb88293f798a2cbc1f12409d9355f5d1b659d73886d0bce553271d7c1b99bb54e447f4384907dacce485558cec03fce866b9f156f63d3f94d6a39b6cd6097e67f7ae9ca7f8418f430f25c034d091865a7dcd3928338232a1f56ab086acf1ad43d4f"}, {&(0x7f00000021c0)="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"}, {&(0x7f0000001780)="3a83772c929390f14db449b9c8beb51352443abc9bea0f7f4852afa94dce63658fd3aa5b27b9118c98a6efeefb4768c6e5ece8c1e51da511deb8e4d8278852dd304017d3593e533f21cb42300b0d53a7594382be5a0cf32797c9fbbf4b67a21c028de3c082972b864ee4184ab1271dae420b247b17c90779ddbe33f9e7bb63c784c29ce2c378c4b7073d02dcc19a2a165dccb5bad4030238c1dc9ea5dd561acfc5000246eccb20a278fbcea2becc70545accd9aaff015f733ae943a654e5703b8d49a82eb516bf0ae84f0d569f7dd0ddbe33330a8e1048ab0d00110323cdabeba8ccca4db44ac99236042443c2e46f8a64e488497e58b10e"}], 0x0, 0x0, 0x83e2a2d1b92ad31, 0x1f00c00e}, 0x20004094) socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x8) socket$netlink(0x10, 0x3, 0x0) 8.8565629s ago: executing program 0 (id=2936): ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000680)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x120, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x11, 0x6, "53c753f0f984520542eb9c5300"}, @NFTA_TABLE_USERDATA={0xdd, 0x6, "42f1d03960919a5181dd3f7fe21fc68f88aa895327540746da2c461d8157955e6af7964ba1dad84458777e56d9f19c105699921f4170a07cece29e92bf16ecd6ab9650814191b1161f8c2670e0d4e4b60a33927e05dcb3514200f4d83b9f60650e2b35f8317420d545fb0fc70754f265f1e8aef011efbbc73735babd2e60e0419205b397942a03d0fba129aec2519da6b3aaa0a89b19d70311d1e17a3e7381053ab00c233e9cc4829e54a7fafe17122d67376ba274022f02e7f50e3ce74feb52188a5ece0b5270b1d75c129d664494643c4cb7d2405e408770"}]}, 0x120}, 0x1, 0x0, 0x0, 0x404c091}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000180), &(0x7f0000000040)=@udp=r5}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f00000000c0)) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r8 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000440)=0xffffffff) recvmmsg(r7, &(0x7f000000e280), 0x58a, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 8.439780932s ago: executing program 1 (id=2937): r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a200200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 7.483132806s ago: executing program 1 (id=2939): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000500)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x9c) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0xe4f0, &(0x7f0000000140)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x154}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x2, 0x1000}) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e22, 0x1000, @local, 0x7}, 0x1c) r6 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r9 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r9, 0x0, 0x0, 0x0, 0x80800, 0x0, {0x0, r10}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.339196775s ago: executing program 6 (id=2940): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x33afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x44}}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000e40000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r7, 0x1}}, 0x18) 7.147713266s ago: executing program 7 (id=2941): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f00000043c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r1, r4, 0x80000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000200)={0xea, r0, 'id0\x00'}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x8) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file1\x00', 0xfff, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file1', 0x3a, [0x46]}, 0x2c) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x80, 0x2e, &(0x7f0000000300)={0x0, 0x4, 0xffffffffffffffff}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x42101, 0x0) 6.488182159s ago: executing program 0 (id=2942): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) r2 = dup(0xffffffffffffffff) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYRES32=0x0], 0x40}, 0x0) read$char_usb(r2, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x30, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 6.388494079s ago: executing program 7 (id=2943): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='eser.\x00']) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000001) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000400)={0x596c, 0x101, 0x6, 0x8}) sendmsg$nl_route(r1, 0x0, 0x0) keyctl$session_to_parent(0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(r3) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfef, 0x2, "ec28a144f13d7607"}) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x7, "0062ba7d820000a75e0000000000fcff00"}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x23bc, @remote, 0x6}, 0x1c) syz_open_pts(r2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x44) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 5.723982444s ago: executing program 9 (id=2944): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0}}, 0x20000000) 5.568122131s ago: executing program 9 (id=2945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x60c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5e0, 0x2, [@TCA_U32_SEL={0x394, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x40000, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x234, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x60c}}, 0x24040084) fsetxattr$security_capability(r0, 0x0, 0x0, 0xfffffffffffffe66, 0x3) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x40102) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)=0x80000007) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) 5.190556461s ago: executing program 0 (id=2946): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@gettaction={0xffffffffffffff68, 0x32, 0x200, 0x270bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008840) socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x14}, {}, {}, [@ldst={0x0, 0x6, 0x2, 0x9, 0x3, 0x30, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4.447920273s ago: executing program 9 (id=2947): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x6, 0xbbee) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000001c0)={0x2, @pix={0x0, 0x0, 0x34565559, 0x0, 0x2000000, 0x0, 0x25, 0xfffffffd}}) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedb0300000000000000000028001a00ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.305969648s ago: executing program 7 (id=2948): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) getresgid(&(0x7f0000000940), 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000400a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001366374000014000280080002400000000d80b857080004400000000c0900010073797a0073794d19942c8a3fd492c051ada779992135e1acb0920bb26a0707bb50cfb560ee516ede246c734699a9cecbfa13447c8590b90441aa4197727f6c16a738a6e7973d7485f1"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.772199067s ago: executing program 7 (id=2949): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffb1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) fcntl$setstatus(r1, 0x4, 0x40800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000001ea8350ba8cf6a8adc51b7e46933b4b200000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r6}, &(0x7f00000001c0), &(0x7f0000001380)=r5}, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) 3.727416265s ago: executing program 1 (id=2950): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x100400d0}, 0x80) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) socket(0x28, 0x5, 0x0) socket$inet(0xa, 0x801, 0x84) 3.686071544s ago: executing program 0 (id=2951): r0 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="200f"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.651189763s ago: executing program 6 (id=2952): mmap(&(0x7f00002ee000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0xf8b2f000) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) msgget$private(0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xffff}, 0x8) 2.977892181s ago: executing program 9 (id=2953): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) eventfd2(0x3, 0x80000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 1.940457882s ago: executing program 9 (id=2954): creat(0x0, 0x10) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff1, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) ioctl$SW_SYNC_IOC_INC(r9, 0xc0105702, 0x0) 1.731369364s ago: executing program 1 (id=2955): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = userfaultfd(0x80001) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x528}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x8000021, 0x800000000004, @thr={&(0x7f00000018c0)="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"/432, &(0x7f0000001500)="9bd0f98168ee11da16cd0255ecb82df4877e9bc4b5170ef25905a527ffed6ff76ad5c1499fa8505864169cb07760b19b7e1764ccfda011474cd99b587e2a58ed4a7a298ce80113e11c147a1c764b233c0f23ca3844c540ea9e44e9e1cbb6b8e7f61b8ec0740632292df036e97fd67760f3b48840b8f613b263750ebd7b7e7ddb17d70894c927a4fa98f31c51e36109ecace70a8fd370aaed430736dd2f531237b545bca48e35035767a4652302bf9a89b95d4e4a63567220a43c1b38"}}, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x3000, 0x1}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0xffffffffffffffff, 0x2d00) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4000) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b9085700000000090400"/29], 0x0) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c1, 0x30, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet(0x2, 0x3, 0x2) open(0x0, 0x24042, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000140)={0x5, 0x1000, 0x1a, 0xc, 0x2, 0x0}) 1.669552613s ago: executing program 6 (id=2956): syz_open_dev$vim2m(0x0, 0x7f, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "dd"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1.119692001s ago: executing program 7 (id=2957): socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x208000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x8cff) 535.705355ms ago: executing program 7 (id=2958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4048814) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000240000000020900010073797a31000000002c000000030a010100000000000000000a00797a32000000001400000011000100000000000000000000000000fa3f40a7406b293324c831aea3c5306d8a8adcf0bebf576c0b0acdbe8617c093dd63c32495503b0660e214ebfafd4b86eaff5e4e0feade3c4b3104fd2750c9f9c3cb90656c6c074f83e9c4dd359bcf1cb307812a8083338970b60e59fb89d5dbbead763ded42e6773b7a512b58f0232b2221f01b80f563d1b2a38b0700002fdd6780bc000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x654}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "2af3"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000095000800"/24], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) 437.759963ms ago: executing program 0 (id=2959): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@n={0x3, 0x10, @generic=0xa, 0x5}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x40, @private=0xa010102}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000010c0)={0x2c, r6, 0x401, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x28000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file1/file2\x00', 0x1c0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000180)=0x1b34a93f, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000000)=""/4096) socket$inet6_mptcp(0xa, 0x1, 0x106) write$UHID_INPUT(r7, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) 0s ago: executing program 1 (id=2960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x20004800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000020000008700000085000000b7000000000000009500"/104], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r4}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000300000000090584", @ANYRESDEC=r5, @ANYRES8=r4], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f00000000c0)=[{0x4, 0x3810, 0x1d, &(0x7f0000000280)="d74636f93b3f95a325abd350940535fb9d39378d876ca9280000000002"}], 0x1}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r8, &(0x7f0000000240)=[{&(0x7f00000036c0)="7d09dbe640bf9169", 0x8}, {&(0x7f00000002c0)="7794aa6fde076f17baebfa46123089f865ef3bb07dfb50afbd9267b1954a9ca90be5b079e13fe10a25256b8e5ada738172399dcfd5157ada26a10314f3dc7fbb570fc1471d8a6d885f70b055abd40ade42d87be1abcae749139f1834b139d1f565a4c412f5b68471ede406d4dcc46e7059c7a88c491cc851ef509b81699d73d64ef0178d20bee18f8334f7218b458a11fe195c8a77be928e3295f874761fd42bec042564e485d332e5e458415d92c9d84dd552f3a23be3f0d11d471a", 0xbc}, {&(0x7f0000002680)="b1c4904623f696c2a640d12b53ef01e997852c5568a057c4b8d19282c7503bccf0437e902fb82c8082eae936784648f998ef99910b13c563e644aa6c3ed944a4c6af254dba9cf894fc33afa9b7b57860b673572071934dbeb25c0b5ab8298451f7f7f77bad1e82b576b3d930d73e29224f0a95477f60923f02d0506773769d10911e5d14c596a6fe94cd49fc48c8ba95985d726b8f9e1f1da0d75c36758dc717faef422300dd060918272643a102df0304243fe8c314c5e0c1a31174b81d4ee2890a65d8be873c2c7684458ceaa9ea479dd21fdd94ccd7fb942d9d797c0f817adb71b2966c229f975a1158d10b66c104fc2ba6a225defd34f5e435dbe1609f33dbe72104e628a1ac0027c09a432709e8610ad713a8884ae1494223f2729f560b7ba7cab7d0ad9a372eb8c7383fe8369af8401ac9e5b5cc8ed5d15f7e092e4dd9", 0x140}], 0x3) close(r0) kernel console output (not intermixed with test programs): 216292][ T30] audit: type=1400 audit(2000000042.850:1192): avc: denied { mounton } for pid=16969 comm="syz.9.2411" path="/290/file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1055.218248][ T978] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1055.559658][ T30] audit: type=1400 audit(2000000043.190:1193): avc: denied { unlink } for pid=9284 comm="syz-executor" name="file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1055.962113][ T978] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1056.148555][T16960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.155911][T16960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.202910][T16981] syz.0.2412 (16981): drop_caches: 2 [ 1056.209600][T16981] syz.0.2412 (16981): drop_caches: 2 [ 1056.260320][ T978] em28xx 2-1:0.0: board has no eeprom [ 1056.751404][ T978] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1057.155854][ T978] em28xx 2-1:0.0: dvb set to isoc mode. [ 1057.163214][ T9531] em28xx 2-1:0.0: Binding DVB extension [ 1057.171764][ T978] usb 2-1: USB disconnect, device number 55 [ 1057.178181][ T978] em28xx 2-1:0.0: Disconnecting em28xx [ 1057.217381][ T9531] em28xx 2-1:0.0: Registering input extension [ 1057.224849][ T978] em28xx 2-1:0.0: Closing input extension [ 1057.246056][ T978] em28xx 2-1:0.0: Freeing device [ 1057.937330][T16960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.965096][T16960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.489113][T16963] 8021q: VLANs not supported on wg2 [ 1058.505034][T16984] veth0_to_bridge: entered promiscuous mode [ 1058.520459][T16984] veth0_to_bridge: left promiscuous mode [ 1058.537952][ T4513] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.591792][ T1337] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.606876][ T9270] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.732616][ T30] audit: type=1400 audit(2000000046.370:1194): avc: denied { setopt } for pid=17002 comm="syz.6.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1058.759134][ T4513] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.931321][T17014] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2421'. [ 1060.221151][T16999] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1060.491077][T16999] usb 2-1: Using ep0 maxpacket: 32 [ 1060.498212][T16999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.509720][T16999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.520339][T16999] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1060.529693][T16999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.580035][T16999] usb 2-1: config 0 descriptor?? [ 1060.819111][T17018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.842937][T17018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.960775][T17036] fuse: Bad value for 'rootmode' [ 1061.023056][T17038] 8021q: VLANs not supported on wg2 [ 1063.055522][T16999] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0 [ 1063.147560][T16999] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0 [ 1063.183837][T16999] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0 [ 1063.316907][T16999] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0 [ 1063.531256][ T9516] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1063.777010][T16999] savu 0003:1E7D:2D5A.0011: unknown main item tag 0x0 [ 1063.788851][T16999] savu 0003:1E7D:2D5A.0011: unbalanced collection at end of report description [ 1063.798711][T16999] savu 0003:1E7D:2D5A.0011: parse failed [ 1063.813819][T16999] savu 0003:1E7D:2D5A.0011: probe with driver savu failed with error -22 [ 1063.921347][ T9516] usb 10-1: device descriptor read/64, error -71 [ 1064.539631][T16999] usb 2-1: USB disconnect, device number 56 [ 1064.701271][ T9516] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1064.712693][T17067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2435'. [ 1064.851162][ T9516] usb 10-1: device descriptor read/64, error -71 [ 1064.961637][ T9516] usb usb10-port1: attempt power cycle [ 1065.020470][T17065] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2433'. [ 1065.401356][ T9516] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1065.433741][ T9516] usb 10-1: device descriptor read/8, error -71 [ 1065.783964][ T9516] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1065.797454][T17084] 8021q: VLANs not supported on wg2 [ 1066.666059][ T9516] usb 10-1: device descriptor read/8, error -71 [ 1066.812472][ T9516] usb usb10-port1: unable to enumerate USB device [ 1066.819155][T17092] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2441'. [ 1067.002364][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.514093][T17105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.589715][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1067.600571][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2443'. [ 1067.791962][ T9412] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1068.173298][ T9412] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1068.989683][ T9412] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1069.002470][ T9412] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1069.032228][ T9412] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1069.040069][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1069.040456][ T9412] usb 8-1: Product: syz [ 1069.053750][ T9412] usb 8-1: Manufacturer: syz [ 1069.058325][ T9412] usb 8-1: SerialNumber: syz [ 1069.251096][ T9412] usb 8-1: config 0 descriptor?? [ 1069.256125][ T9443] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1069.272751][ T9412] usb 8-1: selecting invalid altsetting 0 [ 1069.307825][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1069.428234][ T9443] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1069.446395][ T9443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.504656][ T9443] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1069.537747][ T9443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1069.820331][ T9443] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1069.889980][ T9443] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1069.951068][ T9443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.010277][ T9443] usb 1-1: Product: syz [ 1070.065536][ T9443] usb 1-1: Manufacturer: syz [ 1070.074279][ T9443] usb 1-1: SerialNumber: syz [ 1070.120854][ T9443] usb 1-1: config 0 descriptor?? [ 1070.137419][T17108] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1070.150185][ C0] usb 1-1: NFC: Urb failure (status -71) [ 1070.171295][ T9443] usb 1-1: NFC: Unable to get FW version [ 1070.191150][ T9443] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90 [ 1070.239337][T17106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.261812][T17139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.341559][T17106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.446661][T17108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.540859][ T9516] usb 8-1: USB disconnect, device number 42 [ 1070.783027][ T24] usb 1-1: USB disconnect, device number 28 [ 1072.696462][T17169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.757493][T17169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17169 comm=syz.6.2457 [ 1073.794900][T17180] syz.9.2462 (17180): drop_caches: 2 [ 1074.439519][T17187] syz.7.2465 (17187): drop_caches: 2 [ 1074.441093][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1074.771298][ T9516] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1074.871246][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1074.893622][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1075.075249][ T9412] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1075.093035][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1075.112390][ T9516] usb 7-1: Using ep0 maxpacket: 16 [ 1075.120087][ T9516] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1075.140413][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1075.163603][ T9516] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1075.198484][ T9516] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1075.221515][ T9412] usb 8-1: device descriptor read/64, error -71 [ 1075.225525][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1075.238928][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.275556][ T9516] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1075.287447][ T24] usb 2-1: Product: syz [ 1075.295129][ T24] usb 2-1: Manufacturer: syz [ 1075.299826][ T9516] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.318230][ T24] usb 2-1: SerialNumber: syz [ 1075.323977][ T9516] usb 7-1: Product: syz [ 1075.366216][ T9516] usb 7-1: Manufacturer: syz [ 1075.370862][ T9516] usb 7-1: SerialNumber: syz [ 1075.371732][ T24] usb 2-1: config 0 descriptor?? [ 1075.387482][ T9516] usb 7-1: config 0 descriptor?? [ 1075.393225][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1075.405030][ T24] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 1075.407086][ T9516] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1075.426412][ T9516] em28xx 7-1:0.0: DVB interface 0 found: isoc [ 1075.461065][ T9412] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1075.609199][ T9412] usb 8-1: device descriptor read/64, error -71 [ 1075.803816][ T9412] usb usb8-port1: attempt power cycle [ 1075.925541][T17204] bridge_slave_0: mtu less than device minimum [ 1075.933318][ T30] audit: type=1400 audit(2000000063.560:1195): avc: denied { setopt } for pid=17200 comm="syz.9.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1076.011226][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1076.141027][ T9516] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1076.524362][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1076.538574][ T24] em28xx 2-1:0.0: board has no eeprom [ 1076.571049][ T9412] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1076.591752][ T9412] usb 8-1: device descriptor read/8, error -71 [ 1076.599925][ T9516] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1076.608369][ T9516] em28xx 7-1:0.0: board has no eeprom [ 1076.614062][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1076.622421][T17184] em28xx 2-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 1076.631465][ T24] em28xx 2-1:0.0: dvb set to isoc mode. [ 1076.638255][T16999] em28xx 2-1:0.0: Binding DVB extension [ 1076.654053][ T24] usb 2-1: USB disconnect, device number 57 [ 1076.694180][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 1076.701053][ T9516] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1076.709144][ T9516] em28xx 7-1:0.0: dvb set to isoc mode. [ 1076.718395][T16999] em28xx 2-1:0.0: Registering input extension [ 1076.729006][ T9531] em28xx 7-1:0.0: Binding DVB extension [ 1076.740484][ T9516] usb 7-1: USB disconnect, device number 48 [ 1076.747916][ T9516] em28xx 7-1:0.0: Disconnecting em28xx [ 1076.805163][ T9531] em28xx 7-1:0.0: Registering input extension [ 1076.813316][ T24] em28xx 2-1:0.0: Closing input extension [ 1076.819774][ T9516] em28xx 7-1:0.0: Closing input extension [ 1076.851563][ T9412] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1076.855833][ T9516] em28xx 7-1:0.0: Freeing device [ 1076.868740][ T24] em28xx 2-1:0.0: Freeing device [ 1076.888840][ T9412] usb 8-1: device descriptor read/8, error -71 [ 1077.008994][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2471'. [ 1077.094821][ T9412] usb usb8-port1: unable to enumerate USB device [ 1077.615917][T17220] syz.1.2473 (17220): drop_caches: 2 [ 1079.769069][T17253] kvm: pic: non byte write [ 1080.481049][ T9516] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1080.721058][ T9516] usb 8-1: Using ep0 maxpacket: 32 [ 1080.735350][ T9516] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1080.746087][ T9516] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.760587][ T9516] usb 8-1: Product: syz [ 1080.770748][ T9516] usb 8-1: Manufacturer: syz [ 1080.797356][ T9516] usb 8-1: SerialNumber: syz [ 1080.813301][ T9516] usb 8-1: config 0 descriptor?? [ 1080.831042][ T9516] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1080.911224][T16993] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1081.057775][T17271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2485'. [ 1081.364436][ T9516] gspca_topro: reg_w err -110 [ 1081.401094][ T9516] gspca_topro: Sensor soi763a [ 1081.413105][T16993] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1081.440268][T17273] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 1081.448448][T16993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1081.459552][T16993] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1081.476100][T16993] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1081.501152][T16993] usb 7-1: Product: syz [ 1081.505743][T16993] usb 7-1: Manufacturer: syz [ 1081.510701][T16993] usb 7-1: SerialNumber: syz [ 1081.537627][T16993] usb 7-1: config 0 descriptor?? [ 1081.573639][T16993] usb 7-1: selecting invalid altsetting 0 [ 1082.236839][T17268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.247695][T17268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.272432][ T9516] usb 7-1: USB disconnect, device number 49 [ 1082.382149][ T24] usb 8-1: USB disconnect, device number 47 [ 1082.637072][ T30] audit: type=1400 audit(2000000070.270:1196): avc: denied { read append } for pid=17289 comm="syz.7.2491" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1082.660843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.871313][T17292] ALSA: mixer_oss: invalid OSS volume 'DI' [ 1083.410334][T17296] syz.1.2492 (17296): drop_caches: 2 [ 1084.245379][ T9516] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1084.671240][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1084.745961][ T9516] usb 1-1: Using ep0 maxpacket: 8 [ 1084.865187][ T9516] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1084.943595][ T9516] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1084.983656][ T9516] usb 1-1: string descriptor 0 read error: -22 [ 1084.999155][ T9516] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1085.011293][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1085.071535][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.189058][ T9516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.240477][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1085.352802][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1085.376731][ T9516] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1085.384677][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1085.504157][ T9516] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1085.514646][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1085.524318][ T9516] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1085.531616][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.539729][ T9516] usb 1-1: media controller created [ 1085.549048][ T24] hub 2-1:1.0: bad descriptor, ignoring hub [ 1085.561880][ T24] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1085.576137][ T9516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1085.584873][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1085.596161][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1085.609357][T17318] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1085.618039][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1085.629562][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 1085.639234][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1085.650806][ T9516] zl10353_read_register: readreg error (reg=127, ret==0) [ 1085.688526][ T9516] usb 1-1: USB disconnect, device number 29 [ 1086.070434][T16993] usb 2-1: USB disconnect, device number 58 [ 1086.071392][ T978] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 1086.414191][ T978] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1086.425605][ T978] usb 8-1: not running at top speed; connect to a high speed hub [ 1086.465379][ T978] usb 8-1: config 5 has an invalid interface number: 44 but max is 1 [ 1086.474223][ T978] usb 8-1: config 5 has no interface number 1 [ 1086.480734][ T978] usb 8-1: config 5 interface 44 has no altsetting 0 [ 1086.490662][ T978] usb 8-1: config 5 interface 0 has no altsetting 0 [ 1087.524453][ T978] usb 8-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 1087.545038][ T978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.553277][ T978] usb 8-1: Product: syz [ 1087.557434][ T978] usb 8-1: Manufacturer: syz [ 1087.563201][ T978] usb 8-1: SerialNumber: syz [ 1087.725414][ T30] audit: type=1400 audit(2000000075.360:1197): avc: denied { watch_mount } for pid=17351 comm="syz.1.2508" path="/366" dev="tmpfs" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1087.998529][T10979] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 1088.103251][ T978] usb 8-1: bad CDC descriptors [ 1088.118405][ T978] usb 8-1: USB disconnect, device number 48 [ 1088.144453][ T9600] udevd[9600]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:5.44/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.160659][ T9516] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1088.341166][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1088.349634][ T9516] usb 1-1: no configurations [ 1088.354885][ T9516] usb 1-1: can't read configurations, error -22 [ 1088.501407][ T9516] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1088.509040][ T24] usb 2-1: device descriptor read/64, error -71 [ 1088.509998][T17373] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2513'. [ 1088.801152][ T9516] usb 1-1: no configurations [ 1088.829840][ T9516] usb 1-1: can't read configurations, error -22 [ 1088.852067][ T9516] usb usb1-port1: attempt power cycle [ 1089.431562][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1089.571047][ T24] usb 2-1: device descriptor read/64, error -71 [ 1089.641072][ T9516] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1089.677110][ T9516] usb 1-1: no configurations [ 1089.682188][ T9516] usb 1-1: can't read configurations, error -22 [ 1089.692818][ T24] usb usb2-port1: attempt power cycle [ 1089.811031][ T9516] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1089.834269][ T9516] usb 1-1: no configurations [ 1089.839477][ T9516] usb 1-1: can't read configurations, error -22 [ 1089.850490][ T9516] usb usb1-port1: unable to enumerate USB device [ 1090.041191][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1090.075281][ T24] usb 2-1: device descriptor read/8, error -71 [ 1090.321035][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1090.341473][ T24] usb 2-1: device descriptor read/8, error -71 [ 1090.505316][ T24] usb usb2-port1: unable to enumerate USB device [ 1090.882607][T17407] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20001 [ 1090.949730][ T30] audit: type=1400 audit(2000000078.580:1198): avc: denied { ioctl } for pid=17405 comm="syz.6.2521" path="socket:[56698]" dev="sockfs" ino=56698 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1091.081367][T16993] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1091.191027][ T9443] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1091.233124][T16993] usb 2-1: config 1 has an invalid interface number: 253 but max is 1 [ 1091.241576][T16993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.938259][T16993] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1091.967760][ T9443] usb 1-1: config 1 has an invalid interface number: 253 but max is 1 [ 1092.002300][T16993] usb 2-1: config 1 has no interface number 2 [ 1092.011607][ T9443] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.107454][T16993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.122148][ T9443] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1092.131854][T16993] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1092.144851][ T9443] usb 1-1: config 1 has no interface number 2 [ 1092.150932][ T9443] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.639379][T16993] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1092.646792][ T9443] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1092.660710][ T9443] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1092.668947][T16993] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.678326][T16993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.686516][T16993] usb 2-1: Product: syz [ 1092.691219][T16993] usb 2-1: Manufacturer: syz [ 1092.696227][T16993] usb 2-1: SerialNumber: syz [ 1092.805295][ T9443] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.814552][ T9443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.825995][ T9443] usb 1-1: Product: syz [ 1092.889584][T16993] cdc_ncm 2-1:1.253: CDC Union missing and no IAD found [ 1092.897219][ T9443] usb 1-1: Manufacturer: syz [ 1092.901853][ T9443] usb 1-1: SerialNumber: syz [ 1092.907909][T16993] cdc_ncm 2-1:1.253: bind() failure [ 1093.067260][ T9443] cdc_ncm 1-1:1.253: CDC Union missing and no IAD found [ 1093.171716][ T9443] cdc_ncm 1-1:1.253: bind() failure [ 1093.708611][T17432] futex_wake_op: syz.9.2526 tries to shift op by -1; fix this program [ 1093.742409][T17429] lo speed is unknown, defaulting to 1000 [ 1094.382554][T17433] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2525'. [ 1094.843326][ T24] usb 2-1: USB disconnect, device number 63 [ 1095.056330][ T30] audit: type=1400 audit(2000000082.680:1199): avc: denied { lock } for pid=17443 comm="syz.1.2529" path="socket:[56283]" dev="sockfs" ino=56283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1095.787613][T17448] netlink: 'syz.1.2531': attribute type 10 has an invalid length. [ 1095.819559][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.826766][T17448] bridge0: port 2(bridge_slave_1) entered listening state [ 1095.834116][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.841241][T17448] bridge0: port 1(bridge_slave_0) entered listening state [ 1095.853739][T16999] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1095.914592][T17448] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1095.919462][ T24] usb 1-1: USB disconnect, device number 34 [ 1096.082374][T16999] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.092913][T16999] usb 10-1: config 0 has no interfaces? [ 1096.100674][T16999] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1096.110568][T16999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.193553][T16999] usb 10-1: config 0 descriptor?? [ 1096.789833][T17466] veth0: entered promiscuous mode [ 1096.796620][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2536'. [ 1096.832026][T17466] veth0 (unregistering): left promiscuous mode [ 1097.697126][T17480] veth0_to_bridge: entered promiscuous mode [ 1098.584581][T17473] veth0_to_bridge: left promiscuous mode [ 1099.335039][T16993] usb 10-1: USB disconnect, device number 57 [ 1099.399696][T17486] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2538'. [ 1100.061142][T17507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1100.136984][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.155004][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.201193][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.219110][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.291019][T16993] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1100.353308][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.360749][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.375060][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.391870][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.399493][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.409483][ T9412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1100.422333][ T9412] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 1100.501082][T16993] usb 10-1: Using ep0 maxpacket: 8 [ 1100.507773][T16993] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1100.517803][T16993] usb 10-1: config 4 interface 0 has no altsetting 0 [ 1100.527006][T16993] usb 10-1: string descriptor 0 read error: -22 [ 1100.542606][T16993] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1100.580829][T16993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.605029][T16993] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1100.644983][T16993] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1100.686452][T16993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1100.791132][ T9412] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1100.805139][T17500] usb 10-1: dvb_usb_au6610: wlen=0, aborting [ 1100.903043][T17517] syzkaller0: entered promiscuous mode [ 1100.908583][T17517] syzkaller0: entered allmulticast mode [ 1101.539645][ T9412] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1101.854203][ T9412] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1101.863149][T16993] usb 10-1: media controller created [ 1101.872474][ T9412] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1101.882194][ T9412] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1101.890412][ T9412] usb 8-1: Product: syz [ 1101.900631][T16993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1101.909279][ T9412] usb 8-1: Manufacturer: syz [ 1101.914379][ T9412] usb 8-1: SerialNumber: syz [ 1101.946590][ T9412] usb 8-1: config 0 descriptor?? [ 1101.952541][T16993] zl10353_read_register: readreg error (reg=127, ret==0) [ 1101.962057][ T9412] usb 8-1: selecting invalid altsetting 0 [ 1102.017707][T17512] fido_id[17512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1102.118447][T16993] usb 10-1: USB disconnect, device number 58 [ 1102.313601][T17518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.401675][T17518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.577567][ T9412] usb 8-1: USB disconnect, device number 49 [ 1102.711232][T16993] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1103.064181][T16993] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1103.078397][T16993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1103.111937][T16993] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1103.131449][T16993] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1103.166343][T16993] usb 10-1: Product: syz [ 1103.170672][T16993] usb 10-1: Manufacturer: syz [ 1103.188172][T16993] usb 10-1: SerialNumber: syz [ 1103.240378][T16993] usb 10-1: config 0 descriptor?? [ 1103.325316][T16993] usb 10-1: selecting invalid altsetting 0 [ 1103.591099][T16999] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1103.619106][T17523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.638306][T17523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.654679][ T24] usb 10-1: USB disconnect, device number 59 [ 1103.745313][T16999] usb 2-1: Using ep0 maxpacket: 16 [ 1103.753557][T16999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1103.764976][T16999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1103.776131][T16999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1103.793079][T16999] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1103.812320][T16999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.820388][T16999] usb 2-1: Product: syz [ 1103.842728][T16999] usb 2-1: Manufacturer: syz [ 1103.847403][T16999] usb 2-1: SerialNumber: syz [ 1103.860551][T16999] usb 2-1: config 0 descriptor?? [ 1103.876545][T16999] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1103.888350][T16999] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 1104.404157][T17538] syz.9.2554 (17538): drop_caches: 2 [ 1104.665368][T16999] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1104.678527][ T30] audit: type=1400 audit(2000000092.310:1200): avc: denied { getopt } for pid=17540 comm="syz.6.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1105.271715][T16999] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1105.280015][T16999] em28xx 2-1:0.0: board has no eeprom [ 1105.706812][T17548] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2556'. [ 1106.391257][T16999] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1106.412417][T16999] em28xx 2-1:0.0: dvb set to isoc mode. [ 1106.421563][ T24] em28xx 2-1:0.0: Binding DVB extension [ 1106.534251][ T24] em28xx 2-1:0.0: Registering input extension [ 1107.000507][T17563] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2558'. [ 1107.004671][ T24] usb 2-1: USB disconnect, device number 64 [ 1107.205396][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 1107.241249][ T24] em28xx 2-1:0.0: Closing input extension [ 1107.279080][ T24] em28xx 2-1:0.0: Freeing device [ 1107.473639][T17570] netlink: 'syz.1.2561': attribute type 72 has an invalid length. [ 1107.914467][T17570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2561'. [ 1109.417227][T17590] lo speed is unknown, defaulting to 1000 [ 1110.008174][T17602] syz.1.2570 (17602): drop_caches: 2 [ 1110.211568][ T30] audit: type=1400 audit(2000000097.850:1201): avc: denied { read } for pid=17593 comm="syz.7.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1110.241184][ T9] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1110.381610][ T9] usb 10-1: device descriptor read/64, error -71 [ 1110.684436][ T9] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1110.891048][ T9] usb 10-1: device descriptor read/64, error -71 [ 1111.012042][ T9] usb usb10-port1: attempt power cycle [ 1111.409163][T17621] sd 0:0:1:0: device reset [ 1111.424498][ T9] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1111.834173][ T9] usb 10-1: device descriptor read/8, error -71 [ 1111.987375][T17625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2576'. [ 1112.064635][T17629] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 1112.181717][ T9] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1112.341279][T16999] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1112.362553][ T9] usb 10-1: device descriptor read/8, error -71 [ 1112.501439][ T9] usb usb10-port1: unable to enumerate USB device [ 1112.552524][T16999] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1112.561316][T16999] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1112.572958][T16999] usb 7-1: config 0 has no interface number 1 [ 1112.607479][T16999] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1112.709941][T16999] usb 7-1: too many endpoints for config 0 interface 255 altsetting 8: 253, using maximum allowed: 30 [ 1112.739825][T16999] usb 7-1: config 0 interface 255 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1112.772852][T16999] usb 7-1: config 0 interface 255 has no altsetting 0 [ 1112.802734][T16999] usb 7-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1112.851016][T16999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.495403][T16999] usb 7-1: config 0 descriptor?? [ 1113.519118][T16999] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1113.874309][T17645] syz.0.2582 (17645): drop_caches: 2 [ 1114.587314][T16993] usb 7-1: USB disconnect, device number 50 [ 1114.921044][ T24] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1115.108373][T17629] syz.1.2578 (17629): drop_caches: 2 [ 1115.189317][T17662] syz.9.2587 (17662): drop_caches: 2 [ 1115.497439][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.503814][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.510360][ T24] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1115.519520][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.531692][ T24] usb 8-1: config 0 descriptor?? [ 1115.542768][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1115.803333][T17666] syz.9.2588 (17666): drop_caches: 2 [ 1116.027803][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2589'. [ 1116.145051][T17672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2590'. [ 1116.541336][ T24] gspca_spca508: reg_read err -110 [ 1116.549679][ T24] gspca_spca508: reg_read err -32 [ 1116.557359][ T24] gspca_spca508: reg_read err -32 [ 1116.563803][ T24] gspca_spca508: reg_read err -32 [ 1116.569631][ T24] gspca_spca508: reg write: error -32 [ 1116.577353][ T24] spca508 8-1:0.0: probe with driver spca508 failed with error -32 [ 1117.362138][T16993] usb 8-1: USB disconnect, device number 50 [ 1117.635431][ T30] audit: type=1400 audit(2000000105.270:1202): avc: denied { create } for pid=17683 comm="syz.9.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1117.655187][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1117.833673][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1117.863276][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1117.863283][T17692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1117.932332][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1117.941977][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1117.950301][ T24] usb 2-1: Product: syz [ 1117.959140][ T24] usb 2-1: Manufacturer: syz [ 1117.968129][ T24] usb 2-1: SerialNumber: syz [ 1117.982030][ T24] usb 2-1: config 0 descriptor?? [ 1118.004129][ T24] usb 2-1: selecting invalid altsetting 0 [ 1118.151169][ T30] audit: type=1400 audit(2000000105.780:1203): avc: denied { watch watch_reads } for pid=17683 comm="syz.9.2593" path="/328/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1118.397008][T17698] syz.7.2596 (17698): drop_caches: 2 [ 1118.844422][T17688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.877300][T17688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.908526][T16993] usb 2-1: USB disconnect, device number 65 [ 1119.132627][ T24] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1119.288313][T17707] syz.0.2599 (17707): drop_caches: 2 [ 1119.894039][T17710] syzkaller0: entered promiscuous mode [ 1119.899588][T17710] syzkaller0: entered allmulticast mode [ 1120.218948][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1120.552862][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1120.727321][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1120.862521][ T9] usb 2-1: config 0 has no interface number 0 [ 1120.907323][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1120.928326][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.988939][ T9] usb 2-1: Product: syz [ 1120.995630][ T24] usb 8-1: config 0 has an invalid interface number: 136 but max is 0 [ 1121.003938][ T24] usb 8-1: config 0 has no interface number 0 [ 1121.014308][ T24] usb 8-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1121.021924][ T9] usb 2-1: Manufacturer: syz [ 1121.046999][ T9] usb 2-1: SerialNumber: syz [ 1121.053390][ T24] usb 8-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 1121.067484][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.068922][ T9] usb 2-1: config 0 descriptor?? [ 1121.075562][ T24] usb 8-1: Product: syz [ 1121.075580][ T24] usb 8-1: Manufacturer: syz [ 1121.075594][ T24] usb 8-1: SerialNumber: syz [ 1121.095224][ T24] usb 8-1: config 0 descriptor?? [ 1121.114397][T17702] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1121.141473][ T24] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1121.191053][T16993] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1121.352199][ T978] usb 8-1: USB disconnect, device number 51 [ 1121.391520][T16993] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1121.401716][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1121.438670][T16993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1121.447700][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1121.464618][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1121.473653][T16993] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1121.483440][T16993] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1121.493254][ T9] usb 2-1: media controller created [ 1121.498569][T16993] usb 1-1: Product: syz [ 1121.505593][T16993] usb 1-1: Manufacturer: syz [ 1121.528877][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.538043][T16993] usb 1-1: SerialNumber: syz [ 1121.546562][T16993] usb 1-1: config 0 descriptor?? [ 1121.560577][T16993] usb 1-1: selecting invalid altsetting 0 [ 1121.895747][ T978] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1121.917901][T17718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.929935][T17718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.955265][ T24] usb 1-1: USB disconnect, device number 35 [ 1122.084042][ T978] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1122.098213][ T978] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1122.123317][ T978] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1122.136867][ T978] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1122.146627][ T978] usb 7-1: Product: syz [ 1122.161203][ T978] usb 7-1: Manufacturer: syz [ 1122.166593][ T978] usb 7-1: SerialNumber: syz [ 1122.204562][ T978] usb 7-1: config 0 descriptor?? [ 1122.257006][ T978] usb 7-1: selecting invalid altsetting 0 [ 1122.554028][T17727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.600539][T17727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.638566][T16993] usb 7-1: USB disconnect, device number 51 [ 1122.662280][ T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1122.733841][ T9] usb 2-1: USB disconnect, device number 66 [ 1123.190334][ T30] audit: type=1400 audit(2000000110.820:1204): avc: denied { ioctl } for pid=17734 comm="syz.6.2610" path="socket:[57960]" dev="sockfs" ino=57960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1123.737763][ T30] audit: type=1400 audit(2000000111.370:1205): avc: denied { bind } for pid=17734 comm="syz.6.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1123.776066][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 1124.930900][T17760] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2615'. [ 1125.204351][T16993] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1125.276473][T17764] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2616'. [ 1125.489174][T16993] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1125.505535][T16993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.516800][T16993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.527020][T16993] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1125.542063][T16993] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1125.551409][T16993] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1125.560308][T16993] usb 1-1: Manufacturer: syz [ 1125.570883][T16993] usb 1-1: config 0 descriptor?? [ 1126.012913][T16993] hid_parser_main: 22 callbacks suppressed [ 1126.012935][T16993] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 1126.067495][T16993] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1126.136961][T17777] binder: 17768:17777 ioctl c0306201 200000000180 returned -14 [ 1126.262580][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1126.270553][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1126.605569][ T24] kernel write not supported for file /862/attr/exec (pid: 24 comm: kworker/1:0) [ 1126.645686][ T24] usb 1-1: USB disconnect, device number 36 [ 1127.243609][T17789] 8021q: VLANs not supported on wg2 [ 1127.395007][T17774] fido_id[17774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1127.651445][ T9] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1128.254636][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2630'. [ 1128.276200][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2630'. [ 1128.375336][ T9516] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1128.383060][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1128.411480][T17811] veth0_to_bridge: entered promiscuous mode [ 1129.105573][T17809] veth0_to_bridge: left promiscuous mode [ 1129.261494][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1129.268717][ T9516] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1129.279307][ T9516] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1129.286434][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1129.298636][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1129.310436][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1129.324987][ T9516] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1129.335165][ T9516] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1129.343464][ T9516] usb 2-1: Product: syz [ 1129.348241][ T9516] usb 2-1: Manufacturer: syz [ 1129.353076][ T9516] usb 2-1: SerialNumber: syz [ 1129.358503][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.367787][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.377279][ T24] usb 1-1: Product: syz [ 1129.381552][ T24] usb 1-1: Manufacturer: syz [ 1129.386322][ T24] usb 1-1: SerialNumber: syz [ 1129.391780][ T9516] usb 2-1: config 0 descriptor?? [ 1129.404625][ T24] usb 1-1: config 0 descriptor?? [ 1129.416404][ T9516] usb 2-1: selecting invalid altsetting 0 [ 1129.442556][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.467292][ T24] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 1129.908531][T17827] binder: 17823:17827 ioctl c0306201 200000000180 returned -14 [ 1129.954228][ T9516] usb 2-1: USB disconnect, device number 67 [ 1130.058860][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1130.886184][ T24] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1130.900873][ T24] em28xx 1-1:0.0: board has no eeprom [ 1131.281300][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1131.289267][ T24] em28xx 1-1:0.0: dvb set to isoc mode. [ 1131.403761][ T9516] em28xx 1-1:0.0: Binding DVB extension [ 1131.490376][ T24] usb 1-1: USB disconnect, device number 37 [ 1131.580639][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 1131.784860][ T9516] em28xx 1-1:0.0: Registering input extension [ 1131.797363][ T24] em28xx 1-1:0.0: Closing input extension [ 1131.872581][ T24] em28xx 1-1:0.0: Freeing device [ 1132.401071][ T9516] usb 10-1: new full-speed USB device number 64 using dummy_hcd [ 1132.554940][ T9516] usb 10-1: device descriptor read/64, error -71 [ 1133.001699][ T9516] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 1133.143745][T17866] veth0_to_bridge: entered promiscuous mode [ 1133.211109][ T9516] usb 10-1: device descriptor read/64, error -71 [ 1133.363109][T17862] veth0_to_bridge: left promiscuous mode [ 1134.647394][ T9516] usb usb10-port1: attempt power cycle [ 1135.071627][ T9516] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 1135.281349][ T9516] usb 10-1: device not accepting address 66, error -71 [ 1135.552380][ T9531] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1135.751003][ T9531] usb 8-1: Using ep0 maxpacket: 16 [ 1135.807309][ T9531] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1135.938367][ T9531] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1135.986837][ T9531] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1136.023901][ T9531] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1136.037220][ T9531] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.048097][ T9531] usb 8-1: Product: syz [ 1136.054762][ T9531] usb 8-1: Manufacturer: syz [ 1136.059502][ T9531] usb 8-1: SerialNumber: syz [ 1136.067390][ T9531] usb 8-1: config 0 descriptor?? [ 1136.085696][ T9531] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1136.098608][ T9531] em28xx 8-1:0.0: DVB interface 0 found: isoc [ 1136.112695][ T30] audit: type=1400 audit(2000000123.750:1206): avc: denied { module_load } for pid=17886 comm="syz.9.2651" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1136.146459][T17887] Invalid ELF header len 14 [ 1137.191223][ T9531] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1137.475261][ T9531] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1137.490758][ T9531] em28xx 8-1:0.0: board has no eeprom [ 1137.838281][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 1137.940951][ T9531] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1138.234094][ T9531] em28xx 8-1:0.0: dvb set to isoc mode. [ 1138.242898][ T978] em28xx 8-1:0.0: Binding DVB extension [ 1138.381803][ T978] em28xx 8-1:0.0: Registering input extension [ 1139.159590][T17911] veth0_to_bridge: entered promiscuous mode [ 1139.611413][T17877] em28xx 8-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 1140.025677][T17909] veth0_to_bridge: left promiscuous mode [ 1140.369932][ T9] usb 8-1: USB disconnect, device number 53 [ 1140.382072][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 1140.389995][ T9] em28xx 8-1:0.0: Closing input extension [ 1140.423387][ T9] em28xx 8-1:0.0: Freeing device [ 1140.674691][T17918] netlink: 204732 bytes leftover after parsing attributes in process `syz.7.2656'. [ 1141.111305][T16993] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1141.282821][T16993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.381128][ T9531] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1141.389530][T16993] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1141.415506][T16993] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1141.531308][ T9531] usb 10-1: Using ep0 maxpacket: 16 [ 1141.570072][T16993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.571433][ T9531] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1141.667922][ T9531] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1141.694484][ T9531] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1141.709653][T16993] usb 2-1: config 0 descriptor?? [ 1141.720228][ T9531] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1141.755560][ T9531] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.367133][ T9531] usb 10-1: Product: syz [ 1142.379648][ T9531] usb 10-1: Manufacturer: syz [ 1142.401180][ T9531] usb 10-1: SerialNumber: syz [ 1142.433334][ T9531] usb 10-1: config 0 descriptor?? [ 1142.452796][T17934] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2661'. [ 1142.489406][ T9531] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1142.508992][T17939] FAULT_INJECTION: forcing a failure. [ 1142.508992][T17939] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.522070][T17939] CPU: 0 UID: 0 PID: 17939 Comm: syz.6.2662 Not tainted syzkaller #0 PREEMPT(full) [ 1142.522093][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1142.522103][T17939] Call Trace: [ 1142.522108][T17939] [ 1142.522113][T17939] dump_stack_lvl+0x16c/0x1f0 [ 1142.522131][T17939] should_fail_ex+0x512/0x640 [ 1142.522145][T17939] ? fs_reclaim_acquire+0xae/0x150 [ 1142.522161][T17939] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1142.522177][T17939] should_failslab+0xc2/0x120 [ 1142.522189][T17939] __kmalloc_noprof+0xd2/0x510 [ 1142.522203][T17939] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1142.522220][T17939] ? tomoyo_profile+0x47/0x60 [ 1142.522232][T17939] tomoyo_path_number_perm+0x245/0x580 [ 1142.522245][T17939] ? tomoyo_path_number_perm+0x237/0x580 [ 1142.522260][T17939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1142.522291][T17939] ? find_held_lock+0x2b/0x80 [ 1142.522304][T17939] ? hook_file_ioctl_common+0x145/0x410 [ 1142.522318][T17939] ? __fget_files+0x20e/0x3c0 [ 1142.522330][T17939] ? update_triggers+0x550/0x5a0 [ 1142.522348][T17939] security_file_ioctl+0x9b/0x240 [ 1142.522364][T17939] __x64_sys_ioctl+0xb7/0x210 [ 1142.522381][T17939] do_syscall_64+0xcd/0x4e0 [ 1142.522396][T17939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.522407][T17939] RIP: 0033:0x7fb56738eec9 [ 1142.522417][T17939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.522427][T17939] RSP: 002b:00007fb568197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.522437][T17939] RAX: ffffffffffffffda RBX: 00007fb5675e6090 RCX: 00007fb56738eec9 [ 1142.522444][T17939] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000007 [ 1142.522451][T17939] RBP: 00007fb568197090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.522457][T17939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.522463][T17939] R13: 00007fb5675e6128 R14: 00007fb5675e6090 R15: 00007ffc3c737f88 [ 1142.522476][T17939] [ 1142.522493][T17939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1142.527779][ T9531] em28xx 10-1:0.0: DVB interface 0 found: isoc [ 1142.559108][T17940] binder: 17932:17940 ioctl 4018620d 0 returned -22 [ 1143.168352][ T9531] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1143.602179][ T9531] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1143.636702][ T9531] em28xx 10-1:0.0: board has no eeprom [ 1143.979693][ T978] usb 2-1: USB disconnect, device number 68 [ 1144.459694][T17959] syzkaller0: entered promiscuous mode [ 1144.465279][T17959] syzkaller0: entered allmulticast mode [ 1144.790966][ T9531] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1145.587240][ T9531] em28xx 10-1:0.0: dvb set to isoc mode. [ 1145.725878][ T978] em28xx 10-1:0.0: Binding DVB extension [ 1145.762330][T17920] em28xx 10-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 1145.805916][ T9531] usb 10-1: USB disconnect, device number 68 [ 1145.813186][ T9531] em28xx 10-1:0.0: Disconnecting em28xx [ 1145.836017][ T978] em28xx 10-1:0.0: Registering input extension [ 1145.847696][ T9531] em28xx 10-1:0.0: Closing input extension [ 1145.874413][ T9531] em28xx 10-1:0.0: Freeing device [ 1147.560408][T16994] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1147.726995][T16994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.741748][T16994] usb 2-1: config 0 has no interfaces? [ 1147.758674][T16994] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1147.778030][T16994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.796713][T16994] usb 2-1: config 0 descriptor?? [ 1148.402131][T17983] input: syz1 as /devices/virtual/input/input82 [ 1148.963984][T17993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2674'. [ 1149.041008][ T30] audit: type=1400 audit(2000000136.650:1207): avc: denied { setopt } for pid=17992 comm="syz.6.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1150.288008][T18010] lo speed is unknown, defaulting to 1000 [ 1150.320404][ T9531] usb 2-1: USB disconnect, device number 69 [ 1150.435796][T18014] futex_wake_op: syz.6.2680 tries to shift op by -1; fix this program [ 1151.453590][T18028] binder: 18026:18028 ioctl c0306201 200000000180 returned -14 [ 1151.930989][T16993] usb 10-1: new full-speed USB device number 69 using dummy_hcd [ 1152.306443][T18039] syz.0.2688 (18039): drop_caches: 2 [ 1152.482691][T16993] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1152.490865][T16993] usb 10-1: not running at top speed; connect to a high speed hub [ 1152.503775][T16993] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 1152.519431][T16993] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.588158][T16993] usb 10-1: config 4 has no interface number 0 [ 1152.597905][T16993] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1152.609360][T16993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.629063][T16993] usb 10-1: Product: syz [ 1152.642150][T16993] usb 10-1: Manufacturer: syz [ 1152.688516][T16993] usb 10-1: SerialNumber: syz [ 1153.037660][T16993] uvcvideo 10-1:4.147: probe with driver uvcvideo failed with error -22 [ 1153.078329][T16993] usb 10-1: USB disconnect, device number 69 [ 1153.432157][ T30] audit: type=1400 audit(2000000141.060:1208): avc: denied { ioctl } for pid=18049 comm="syz.0.2690" path="socket:[59514]" dev="sockfs" ino=59514 ioctlcmd=0x891d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1153.891010][T16993] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1154.156243][T16993] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1154.182895][T16993] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1154.244632][T18062] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2693'. [ 1154.525906][T16993] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1154.535174][T16993] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1154.565482][T16993] usb 10-1: Product: syz [ 1154.602141][T16993] usb 10-1: Manufacturer: syz [ 1154.752041][T18072] FAULT_INJECTION: forcing a failure. [ 1154.752041][T18072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.765305][T18072] CPU: 0 UID: 0 PID: 18072 Comm: syz.1.2696 Not tainted syzkaller #0 PREEMPT(full) [ 1154.765332][T18072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1154.765341][T18072] Call Trace: [ 1154.765347][T18072] [ 1154.765354][T18072] dump_stack_lvl+0x16c/0x1f0 [ 1154.765384][T18072] should_fail_ex+0x512/0x640 [ 1154.765411][T18072] _copy_to_user+0x32/0xd0 [ 1154.765438][T18072] simple_read_from_buffer+0xcb/0x170 [ 1154.765458][T18072] proc_fail_nth_read+0x197/0x240 [ 1154.765479][T18072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.765500][T18072] ? rw_verify_area+0xcf/0x6c0 [ 1154.765528][T18072] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1154.765547][T18072] vfs_read+0x1e4/0xcf0 [ 1154.765569][T18072] ? __pfx___mutex_lock+0x10/0x10 [ 1154.765593][T18072] ? __pfx_vfs_read+0x10/0x10 [ 1154.765618][T18072] ? __fget_files+0x20e/0x3c0 [ 1154.765643][T18072] ksys_read+0x12a/0x250 [ 1154.765660][T18072] ? __pfx_ksys_read+0x10/0x10 [ 1154.765685][T18072] do_syscall_64+0xcd/0x4e0 [ 1154.765712][T18072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.765730][T18072] RIP: 0033:0x7f4e7a78d8dc [ 1154.765745][T18072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1154.765762][T18072] RSP: 002b:00007f4e789d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1154.765780][T18072] RAX: ffffffffffffffda RBX: 00007f4e7a9e6090 RCX: 00007f4e7a78d8dc [ 1154.765792][T18072] RDX: 000000000000000f RSI: 00007f4e789d50a0 RDI: 000000000000000a [ 1154.765800][T18072] RBP: 00007f4e789d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.765810][T18072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.765820][T18072] R13: 00007f4e7a9e6128 R14: 00007f4e7a9e6090 R15: 00007ffe0bb80308 [ 1154.765844][T18072] [ 1155.218053][T16993] usb 10-1: SerialNumber: syz [ 1155.233334][T16993] usb 10-1: config 0 descriptor?? [ 1155.241387][T16993] usb 10-1: selecting invalid altsetting 0 [ 1155.934340][T18084] binder: 18081:18084 ioctl c0306201 200000000180 returned -14 [ 1156.049428][T18052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.059197][T18052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.074595][ T9] usb 10-1: USB disconnect, device number 70 [ 1156.141870][T18087] netlink: 'syz.6.2699': attribute type 1 has an invalid length. [ 1156.227462][T18087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1156.321433][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 1156.331703][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.338921][ C0] bridge0: topology change detected, propagating [ 1156.345484][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.352668][ C0] bridge0: topology change detected, propagating [ 1156.403914][T18086] vlan2: entered promiscuous mode [ 1156.424259][T18086] bond3: entered promiscuous mode [ 1156.442801][T18086] vlan2: entered allmulticast mode [ 1156.450291][T18086] bond3: entered allmulticast mode [ 1157.527143][T18106] syz.9.2701 (18106): drop_caches: 2 [ 1158.034204][T18112] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2706'. [ 1158.565956][T18126] binder: 18118:18126 ioctl c0306201 200000000180 returned -14 [ 1160.897776][ T9531] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1161.181297][ T9531] usb 7-1: Using ep0 maxpacket: 16 [ 1161.191941][ T9531] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1161.206045][ T9531] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1161.643866][ T9531] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1161.701106][ T9531] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1161.724816][ T9531] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.743171][ T9531] usb 7-1: Product: syz [ 1161.751229][ T9531] usb 7-1: Manufacturer: syz [ 1161.763128][ T9531] usb 7-1: SerialNumber: syz [ 1161.775784][ T9531] usb 7-1: config 0 descriptor?? [ 1161.796976][ T9531] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1161.890961][ T9531] em28xx 7-1:0.0: DVB interface 0 found: isoc [ 1162.054870][T18168] syz.1.2720 (18168): drop_caches: 2 [ 1162.447690][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2721'. [ 1162.945651][ T9531] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1163.450872][ T9531] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1163.494603][T18187] veth0_to_bridge: entered promiscuous mode [ 1163.508172][T18187] fuse: Bad value for 'fd' [ 1163.527098][ T9531] em28xx 7-1:0.0: board has no eeprom [ 1163.599231][T18188] FAULT_INJECTION: forcing a failure. [ 1163.599231][T18188] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.278174][T18184] veth0_to_bridge: left promiscuous mode [ 1164.599453][T18188] CPU: 1 UID: 0 PID: 18188 Comm: syz.0.2726 Not tainted syzkaller #0 PREEMPT(full) [ 1164.599476][T18188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1164.599486][T18188] Call Trace: [ 1164.599492][T18188] [ 1164.599499][T18188] dump_stack_lvl+0x16c/0x1f0 [ 1164.599528][T18188] should_fail_ex+0x512/0x640 [ 1164.599555][T18188] should_failslab+0xc2/0x120 [ 1164.599576][T18188] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1164.599597][T18188] ? skb_clone+0x190/0x3f0 [ 1164.599624][T18188] skb_clone+0x190/0x3f0 [ 1164.599647][T18188] netlink_deliver_tap+0xabd/0xd30 [ 1164.599675][T18188] netlink_unicast+0x64c/0x870 [ 1164.599702][T18188] ? __pfx_netlink_unicast+0x10/0x10 [ 1164.599726][T18188] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1164.599757][T18188] netlink_sendmsg+0x8d1/0xdd0 [ 1164.599785][T18188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1164.599811][T18188] ? security_socket_sendmsg+0x51/0x240 [ 1164.599834][T18188] ? security_socket_sendmsg+0x51/0x240 [ 1164.599860][T18188] ____sys_sendmsg+0xa98/0xc70 [ 1164.599889][T18188] ? copy_msghdr_from_user+0x10a/0x160 [ 1164.599910][T18188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1164.599935][T18188] ? trace_sched_exit_tp+0xd1/0x120 [ 1164.599963][T18188] ? rcu_is_watching+0x12/0xc0 [ 1164.599989][T18188] ___sys_sendmsg+0x134/0x1d0 [ 1164.600013][T18188] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.600066][T18188] __sys_sendmsg+0x16d/0x220 [ 1164.600090][T18188] ? __pfx___sys_sendmsg+0x10/0x10 [ 1164.600111][T18188] ? ksys_write+0x17e/0x250 [ 1164.600146][T18188] do_syscall_64+0xcd/0x4e0 [ 1164.600186][T18188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.600204][T18188] RIP: 0033:0x7ff4f578eec9 [ 1164.600218][T18188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.600235][T18188] RSP: 002b:00007ff4f6653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.600253][T18188] RAX: ffffffffffffffda RBX: 00007ff4f59e5fa0 RCX: 00007ff4f578eec9 [ 1164.600265][T18188] RDX: 0000000004000850 RSI: 0000200000000140 RDI: 0000000000000004 [ 1164.600276][T18188] RBP: 00007ff4f6653090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.600286][T18188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.600296][T18188] R13: 00007ff4f59e6038 R14: 00007ff4f59e5fa0 R15: 00007ffeab334188 [ 1164.600321][T18188] [ 1164.830990][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.382029][T18199] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2728'. [ 1165.681184][ T9531] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1165.689034][ T9531] em28xx 7-1:0.0: dvb set to isoc mode. [ 1165.771959][ T978] em28xx 7-1:0.0: Binding DVB extension [ 1165.919893][ T978] em28xx 7-1:0.0: Registering input extension [ 1166.017233][ T978] usb 7-1: USB disconnect, device number 52 [ 1166.043663][ T978] em28xx 7-1:0.0: Disconnecting em28xx [ 1166.051402][ T978] em28xx 7-1:0.0: Closing input extension [ 1166.124906][ T978] em28xx 7-1:0.0: Freeing device [ 1166.147291][T18206] lo speed is unknown, defaulting to 1000 [ 1166.191152][ T9] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1166.287996][T18210] futex_wake_op: syz.6.2732 tries to shift op by -1; fix this program [ 1166.358374][ T9] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1166.382393][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1166.533861][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1166.689743][ T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1166.853125][ T9] usb 10-1: Product: syz [ 1166.870991][ T9] usb 10-1: Manufacturer: syz [ 1167.003786][ T9] usb 10-1: SerialNumber: syz [ 1167.019147][ T9] usb 10-1: config 0 descriptor?? [ 1167.091374][T18217] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2734'. [ 1167.263904][ T9] usb 10-1: selecting invalid altsetting 0 [ 1167.415975][ T30] audit: type=1400 audit(2000000155.040:1209): avc: denied { listen } for pid=18219 comm="syz.1.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.492611][T18204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.503737][T18204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.517108][ T9] usb 10-1: USB disconnect, device number 71 [ 1167.523762][T18226] loop6: detected capacity change from 0 to 524287999 [ 1167.667458][ T9600] buffer_io_error: 11 callbacks suppressed [ 1167.667473][ T9600] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 1168.817549][T18232] veth0_to_bridge: entered promiscuous mode [ 1168.854944][T18232] veth0_to_bridge: left promiscuous mode [ 1169.090505][T18242] binder: 18241:18242 ioctl 80286722 200000000000 returned -22 [ 1169.918801][T18248] tipc: Started in network mode [ 1169.961518][T18248] tipc: Node identity 7eed7bcd273b, cluster identity 4711 [ 1169.968818][T18248] tipc: Enabled bearer , priority 0 [ 1169.998255][T18257] syzkaller0: entered promiscuous mode [ 1170.022081][T18257] syzkaller0: entered allmulticast mode [ 1170.355844][T18248] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1170.552163][T18264] futex_wake_op: syz.1.2746 tries to shift op by -1; fix this program [ 1170.669211][T18262] lo speed is unknown, defaulting to 1000 [ 1170.730306][T18257] tipc: Resetting bearer [ 1170.805678][T18247] tipc: Resetting bearer [ 1170.874121][T18247] tipc: Disabling bearer [ 1170.891140][T16994] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1171.125697][T16994] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 235, changing to 7 [ 1171.160988][T16994] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1171.169960][T16994] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1171.196363][T16994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.208511][T16994] usb 7-1: Product: ÐŒ [ 1171.215442][T16994] usb 7-1: Manufacturer: ॅ稶í™ç¦á·Ÿî’¡â½•êªä¿ ç‘‚抶⎦í£Õ’å’³é­é©»ë’†æ•³èšç˜´ê±ãµ“㎔ꨵ礉æ¸é¾¹è¹‹T蟜〽ã°çŽŽíˆ–⻡ìŠé¬ê½«æ®·çˆ–ê›æ•¤ä—¨åª„㲹ꀸ㎟鹛ൺ꤃ä£ãƒ”쿒գ妃袷艳娡炌맓ꨳ圃ஜ᳔࣢윟䷪㧵鈡惓謴杖æœåž¯åª·æ¹³æ‹ˆë¾œá©”솵ç©è»†ìªšà·€áž®ï‘蹫á§é–ì„忚曵åžë£¥â³¡æƒá¿¦Ï魭íšæ¢²é‹ží—£æºƒã» [ 1171.249743][T16994] usb 7-1: SerialNumber: ê­­î©€äƒâ“§é¥è²Ÿë˜½å½›á‚´î™”䖆䈵᷊໑쳾é¬ï“ƒä”‚ꈛӬ鈳硃ꥲ줰ᘰ腪芰a洴䡣瑤⟣瀺뀦谴얌㎔㦵鶌âƒã›¹é²¬Æœç®§ï€žæ˜¡é¸ í—춎摦॓뛡娜㠷콭涜ֺ鰺â¢ï¦ [ 1171.396792][ T24] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1171.595954][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.886671][ T9443] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1171.922926][ T24] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1171.933047][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.944980][ T24] usb 8-1: config 0 descriptor?? [ 1171.954656][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1172.056130][ T9443] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1172.163614][ T9443] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1172.186957][ T9443] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1172.197616][T18287] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1172.204686][ T9443] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1172.204729][ T9443] usb 10-1: Product: syz [ 1172.204743][ T9443] usb 10-1: Manufacturer: syz [ 1172.204757][ T9443] usb 10-1: SerialNumber: syz [ 1172.241464][ T9443] usb 10-1: config 0 descriptor?? [ 1172.276996][ T9443] usb 10-1: selecting invalid altsetting 0 [ 1172.360979][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1172.582663][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1172.614298][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1172.652276][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1172.691756][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 1172.708691][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 1172.725125][T18278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.736844][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 1172.752070][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 1172.763550][T18278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.783905][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 1172.803520][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 1172.819742][ T9443] usb 10-1: USB disconnect, device number 72 [ 1172.959955][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 1172.980241][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 1173.011449][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 1173.022481][T18301] FAULT_INJECTION: forcing a failure. [ 1173.022481][T18301] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.040633][T18301] CPU: 1 UID: 0 PID: 18301 Comm: syz.1.2754 Not tainted syzkaller #0 PREEMPT(full) [ 1173.040659][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1173.040669][T18301] Call Trace: [ 1173.040676][T18301] [ 1173.040685][T18301] dump_stack_lvl+0x16c/0x1f0 [ 1173.040713][T18301] should_fail_ex+0x512/0x640 [ 1173.040734][T18301] ? fs_reclaim_acquire+0xae/0x150 [ 1173.040758][T18301] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1173.040783][T18301] should_failslab+0xc2/0x120 [ 1173.040802][T18301] __kmalloc_noprof+0xd2/0x510 [ 1173.040824][T18301] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1173.040851][T18301] ? tomoyo_profile+0x47/0x60 [ 1173.040871][T18301] tomoyo_path_number_perm+0x245/0x580 [ 1173.040890][T18301] ? tomoyo_path_number_perm+0x237/0x580 [ 1173.040912][T18301] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1173.040934][T18301] ? find_held_lock+0x2b/0x80 [ 1173.040977][T18301] ? find_held_lock+0x2b/0x80 [ 1173.040997][T18301] ? hook_file_ioctl_common+0x145/0x410 [ 1173.041019][T18301] ? __fget_files+0x20e/0x3c0 [ 1173.041042][T18301] security_file_ioctl+0x9b/0x240 [ 1173.041067][T18301] __x64_sys_ioctl+0xb7/0x210 [ 1173.041095][T18301] do_syscall_64+0xcd/0x4e0 [ 1173.041120][T18301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.041138][T18301] RIP: 0033:0x7f4e7a78eec9 [ 1173.041159][T18301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.041175][T18301] RSP: 002b:00007f4e789f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.041191][T18301] RAX: ffffffffffffffda RBX: 00007f4e7a9e5fa0 RCX: 00007f4e7a78eec9 [ 1173.041202][T18301] RDX: 0000200000000240 RSI: 0000000000003b71 RDI: 0000000000000003 [ 1173.041213][T18301] RBP: 00007f4e789f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.041223][T18301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.041232][T18301] R13: 00007f4e7a9e6038 R14: 00007f4e7a9e5fa0 R15: 00007ffe0bb80308 [ 1173.041256][T18301] [ 1173.237878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.442879][T18301] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1173.459996][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1173.468091][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1173.476607][ T24] pwc: Registered as video103. [ 1173.495928][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input84 [ 1173.519604][ T24] usb 8-1: USB disconnect, device number 54 [ 1173.809963][T18307] syzkaller0: entered promiscuous mode [ 1173.815728][T18307] syzkaller0: entered allmulticast mode [ 1174.672971][ T9] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1174.751640][T16994] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1174.869407][T16994] usb 7-1: USB disconnect, device number 53 [ 1174.891975][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1174.920730][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.974855][ T9] usb 8-1: config 0 has no interfaces? [ 1175.011749][ T9600] udevd[9600]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1175.057870][ T9] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1175.067056][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.123138][ T9] usb 8-1: Product: syz [ 1175.127339][ T9] usb 8-1: Manufacturer: syz [ 1175.147244][ T9] usb 8-1: SerialNumber: syz [ 1175.227074][ T9] usb 8-1: config 0 descriptor?? [ 1175.754356][ T9443] usb 8-1: USB disconnect, device number 55 [ 1176.479209][T18351] netlink: 'syz.7.2765': attribute type 1 has an invalid length. [ 1176.815574][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.821893][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.136046][T18349] bridge_slave_1: left allmulticast mode [ 1177.147659][T18349] bridge_slave_1: left promiscuous mode [ 1177.187157][T18349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.223449][T18349] bridge_slave_0: left allmulticast mode [ 1177.229343][T18349] bridge_slave_0: left promiscuous mode [ 1177.235402][T18349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.337606][T18351] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1177.431185][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1177.692913][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1177.705038][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1177.774594][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1177.784533][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1177.793234][ T9] usb 2-1: Product: syz [ 1177.797840][ T9] usb 2-1: Manufacturer: syz [ 1177.818374][ T9] usb 2-1: SerialNumber: syz [ 1177.870062][ T9] usb 2-1: config 0 descriptor?? [ 1177.899037][ T9] usb 2-1: selecting invalid altsetting 0 [ 1178.125874][T18354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.149341][T18354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.255920][ T24] usb 2-1: USB disconnect, device number 70 [ 1179.581284][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1179.681195][T18393] syz.0.2778 (18393): drop_caches: 2 [ 1179.982440][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1180.001468][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1180.065496][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.149559][T18396] syzkaller0: entered promiscuous mode [ 1180.155270][T18396] syzkaller0: entered allmulticast mode [ 1181.028906][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1181.089368][ T9] pvrusb2: ********** [ 1181.141076][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1181.156905][ T9] pvrusb2: Important functionality might not be entirely working. [ 1181.174391][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1181.234839][T18386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1181.257020][ T9] pvrusb2: ********** [ 1183.764311][ T2337] pvrusb2: Invalid write control endpoint [ 1183.800198][T18435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1183.859219][ T9] usb 2-1: USB disconnect, device number 71 [ 1183.936246][ T2337] pvrusb2: Invalid write control endpoint [ 1183.951184][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1184.051434][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1184.060289][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1184.072956][ T2337] pvrusb2: Device being rendered inoperable [ 1184.079136][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1184.087556][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1184.137659][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1184.150260][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1184.163094][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1185.241115][ T9443] IPVS: starting estimator thread 0... [ 1185.341252][T18448] IPVS: using max 40 ests per chain, 96000 per kthread [ 1185.462079][T18451] syz.0.2792 (18451): drop_caches: 2 [ 1186.212696][T18462] CUSE: info not properly terminated [ 1186.214229][ T30] audit: type=1400 audit(2000000173.840:1210): avc: denied { getopt } for pid=18460 comm="syz.1.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1187.094825][ T30] audit: type=1800 audit(2000000174.710:1211): pid=18472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2798" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1187.243208][T18477] 8021q: VLANs not supported on wg2 [ 1187.391009][ T9516] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1188.173964][ T9516] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1188.208263][ T9516] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1189.411261][ T9516] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1189.420263][ T9516] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1189.432005][ T9516] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1189.446700][ T9516] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1189.457998][ T9516] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1189.466402][ T9516] usb 7-1: Product: syz [ 1189.470759][ T9516] usb 7-1: Manufacturer: syz [ 1189.489836][ T9516] cdc_wdm 7-1:1.0: skipping garbage [ 1189.495266][ T9516] cdc_wdm 7-1:1.0: skipping garbage [ 1189.506379][ T9516] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1189.512343][ T9516] cdc_wdm 7-1:1.0: Unknown control protocol [ 1189.599794][T18490] netlink: 'syz.1.2801': attribute type 4 has an invalid length. [ 1189.659077][T18492] netlink: 'syz.1.2801': attribute type 4 has an invalid length. [ 1189.804777][T18492] trusted_key: encrypted_key: insufficient parameters specified [ 1190.991324][T18503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2804'. [ 1191.571638][T18508] veth0_to_bridge: entered promiscuous mode [ 1192.333392][T18506] veth0_to_bridge: left promiscuous mode [ 1192.499637][ T9] usb 7-1: USB disconnect, device number 54 [ 1193.094561][T18515] syz.7.2808 (18515): drop_caches: 2 [ 1193.756841][T18526] syz.9.2809 (18526): drop_caches: 2 [ 1194.033870][T18527] 8021q: VLANs not supported on wg2 [ 1194.651400][T18532] pim6reg: entered allmulticast mode [ 1195.331189][ T30] audit: type=1400 audit(2000000182.860:1212): avc: denied { listen } for pid=18529 comm="syz.1.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1195.773220][T18541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2813'. [ 1195.871244][ T30] audit: type=1400 audit(2000000182.880:1213): avc: denied { accept } for pid=18529 comm="syz.1.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1196.839357][T18556] veth0_to_bridge: entered promiscuous mode [ 1197.126381][T18550] veth0_to_bridge: left promiscuous mode [ 1198.844372][T18563] vivid-004: ================= START STATUS ================= [ 1198.877840][T18563] vivid-004: Radio HW Seek Mode: Bounded [ 1198.953879][T18563] vivid-004: Radio Programmable HW Seek: false [ 1199.007372][T18563] vivid-004: RDS Rx I/O Mode: Block I/O [ 1199.013686][T18563] vivid-004: Generate RBDS Instead of RDS: false [ 1199.288268][ T30] audit: type=1400 audit(2000000186.640:1214): avc: denied { name_bind } for pid=18560 comm="syz.7.2820" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1199.311906][T18563] vivid-004: RDS Reception: true [ 1199.320954][T18563] vivid-004: RDS Program Type: 0 inactive [ 1199.326715][T18563] vivid-004: RDS PS Name: inactive [ 1199.354257][T18571] futex_wake_op: syz.1.2823 tries to shift op by -1; fix this program [ 1199.377524][T18563] vivid-004: RDS Radio Text: inactive [ 1199.383327][T18563] vivid-004: RDS Traffic Announcement: false inactive [ 1199.399308][T18565] lo speed is unknown, defaulting to 1000 [ 1199.400277][T18563] vivid-004: RDS Traffic Program: false inactive [ 1199.419729][T18563] vivid-004: RDS Music: false inactive [ 1199.426728][T18563] vivid-004: ================== END STATUS ================== [ 1199.511086][ T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1199.603663][T18577] syz.0.2825 (18577): drop_caches: 2 [ 1199.960966][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1199.983959][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1200.015466][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1200.035135][ T30] audit: type=1400 audit(2000000187.670:1215): avc: denied { connect } for pid=18579 comm="syz.7.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1200.081009][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1200.115580][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1200.147840][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.157146][ T24] usb 7-1: Product: syz [ 1200.166873][ T24] usb 7-1: Manufacturer: syz [ 1200.178732][ T24] usb 7-1: SerialNumber: syz [ 1200.234812][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1200.262146][ T24] usb 7-1: config 0 descriptor?? [ 1200.288620][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1200.318425][ T24] em28xx 7-1:0.0: DVB interface 0 found: isoc [ 1200.371246][ T9516] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1200.391910][T18590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2828'. [ 1200.553759][ T9516] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1200.609429][ T9516] usb 8-1: config 2 has an invalid interface number: 34 but max is 2 [ 1200.618008][ T9516] usb 8-1: config 2 has an invalid interface number: 6 but max is 2 [ 1200.629198][ T9516] usb 8-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1200.644330][ T9516] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.656832][ T9516] usb 8-1: config 2 has 4 interfaces, different from the descriptor's value: 3 [ 1200.667795][ T9516] usb 8-1: config 2 has no interface number 0 [ 1200.676366][ T9516] usb 8-1: config 2 has no interface number 3 [ 1200.684958][ T9516] usb 8-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1200.699102][ T9516] usb 8-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1200.711360][ T9516] usb 8-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1200.785611][ T9516] usb 8-1: config 2 interface 6 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1200.826517][ T9516] usb 8-1: config 2 interface 1 has no altsetting 0 [ 1200.833487][ T9516] usb 8-1: config 2 interface 34 has no altsetting 0 [ 1200.840358][ T9516] usb 8-1: config 2 interface 6 has no altsetting 0 [ 1200.878053][ T9516] usb 8-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1200.890159][ T9516] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.898627][ T9516] usb 8-1: Product: syz [ 1200.903226][ T9516] usb 8-1: Manufacturer: syz [ 1200.913469][ T9516] usb 8-1: SerialNumber: syz [ 1201.062019][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1201.078172][ T30] audit: type=1400 audit(2000000188.709:1216): avc: denied { write } for pid=18598 comm="syz.0.2831" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1201.117273][ T30] audit: type=1400 audit(2000000188.749:1217): avc: denied { create } for pid=18598 comm="syz.0.2831" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1201.354141][T18602] 8021q: VLANs not supported on wg2 [ 1202.188114][ T9516] usb 8-1: selecting invalid altsetting 0 [ 1202.249467][ T24] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1202.260492][ T24] em28xx 7-1:0.0: board has no eeprom [ 1202.274840][ T9516] hub 8-1:2.6: Invalid hub with more than one config or interface [ 1202.282765][ T9516] hub 8-1:2.6: probe with driver hub failed with error -22 [ 1202.341998][ T9516] usb 8-1: USB disconnect, device number 56 [ 1202.352856][T18608] veth0_to_bridge: entered promiscuous mode [ 1203.109416][T18605] veth0_to_bridge: left promiscuous mode [ 1203.372401][T18604] em28xx 7-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 1203.431068][ T24] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1203.438921][ T24] em28xx 7-1:0.0: dvb set to isoc mode. [ 1203.588651][ T978] em28xx 7-1:0.0: Binding DVB extension [ 1203.687131][ T24] usb 7-1: USB disconnect, device number 55 [ 1203.752365][ T24] em28xx 7-1:0.0: Disconnecting em28xx [ 1204.051869][ T978] em28xx 7-1:0.0: Registering input extension [ 1204.058381][ T24] em28xx 7-1:0.0: Closing input extension [ 1204.072249][ T24] em28xx 7-1:0.0: Freeing device [ 1204.271981][T18635] syz.6.2840: attempt to access beyond end of device [ 1204.271981][T18635] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 1205.494943][T18648] netlink: 204732 bytes leftover after parsing attributes in process `syz.6.2842'. [ 1206.166343][T18654] syz.0.2846 (18654): drop_caches: 2 [ 1208.232703][T16993] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1208.407031][T16993] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.487452][T16993] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1208.496912][T16993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.523237][T16993] usb 8-1: config 0 descriptor?? [ 1208.532228][T16993] pwc: Askey VC010 type 2 USB webcam detected. [ 1208.614776][T18685] fuse: Bad value for 'group_id' [ 1208.665999][T18685] fuse: Bad value for 'group_id' [ 1208.938078][T18682] veth0_macvtap: left allmulticast mode [ 1208.954804][T16993] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1208.961703][T18682] 0ªX¹¦D: left allmulticast mode [ 1209.034964][T16993] pwc: recv_control_msg error -32 req 02 val 2700 [ 1209.106783][ T6083] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.169419][T16993] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1209.171083][ T6083] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.201356][T18696] lo speed is unknown, defaulting to 1000 [ 1209.353316][T18683] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2850'. [ 1209.379733][T16993] pwc: recv_control_msg error -32 req 04 val 1000 [ 1209.401826][ T6083] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.471706][T16993] pwc: recv_control_msg error -32 req 04 val 1300 [ 1209.502330][ T6083] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.513200][T16993] pwc: recv_control_msg error -32 req 04 val 1400 [ 1209.520637][T16993] pwc: recv_control_msg error -32 req 02 val 2000 [ 1209.680688][T16993] pwc: recv_control_msg error -32 req 02 val 2100 [ 1209.734137][T16993] pwc: recv_control_msg error -32 req 04 val 1500 [ 1209.758340][T16993] pwc: recv_control_msg error -32 req 02 val 2500 [ 1210.290841][T18704] syz.9.2858 (18704): drop_caches: 2 [ 1210.403330][T16993] pwc: recv_control_msg error -32 req 02 val 2600 [ 1210.417567][T16993] pwc: recv_control_msg error -32 req 02 val 2900 [ 1210.681967][T16993] pwc: recv_control_msg error -71 req 04 val 1100 [ 1210.952353][T16993] pwc: recv_control_msg error -71 req 04 val 1200 [ 1210.978930][T16993] pwc: Registered as video103. [ 1211.020442][T16993] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input86 [ 1211.085872][T16993] usb 8-1: USB disconnect, device number 57 [ 1211.773793][T18728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2863'. [ 1212.703630][T18740] veth0_to_bridge: entered promiscuous mode [ 1213.442887][T18738] veth0_to_bridge: left promiscuous mode [ 1214.231140][ T9516] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1214.285879][T18754] syz.9.2870 (18754): drop_caches: 2 [ 1214.681186][ T978] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1214.718670][ T9516] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1214.728689][ T9516] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1214.743402][ T9516] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1214.752848][ T9516] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1214.763305][ T9516] usb 7-1: Product: syz [ 1214.767516][ T9516] usb 7-1: Manufacturer: syz [ 1214.773105][ T9516] usb 7-1: SerialNumber: syz [ 1214.780585][ T9516] usb 7-1: config 0 descriptor?? [ 1214.793280][ T9516] usb 7-1: selecting invalid altsetting 0 [ 1214.848712][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 4096, setting to 64 [ 1214.861056][ T9531] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1214.879844][ T978] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1214.921221][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.939015][ T978] usb 2-1: Product: syz [ 1214.951028][ T978] usb 2-1: Manufacturer: syz [ 1214.960999][ T978] usb 2-1: SerialNumber: syz [ 1214.972201][ T978] usb 2-1: config 0 descriptor?? [ 1215.101709][ T9531] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1215.111871][ T9531] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1215.120490][ T9531] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1215.129881][ T9531] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1215.147571][ T9531] usb 1-1: Product: syz [ 1215.159725][ T9531] usb 1-1: Manufacturer: syz [ 1215.169935][ T9531] usb 1-1: SerialNumber: syz [ 1215.521616][ T9531] usb 1-1: config 0 descriptor?? [ 1215.536564][ T9531] usb 1-1: selecting invalid altsetting 0 [ 1215.743921][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.753045][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.811629][ T978] usb 7-1: USB disconnect, device number 56 [ 1215.927681][T18758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.937662][T18758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.989932][T16993] usb 1-1: USB disconnect, device number 38 [ 1217.187603][T16994] usb 2-1: USB disconnect, device number 72 [ 1217.311002][T16993] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1217.765895][T18792] veth0_to_bridge: entered promiscuous mode [ 1218.001519][T16993] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1218.469359][T16993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1218.546137][T16993] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1218.573337][T18790] veth0_to_bridge: left promiscuous mode [ 1218.614990][T16993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.735293][T16993] usb 1-1: config 0 descriptor?? [ 1218.780929][ T9443] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1218.868778][T18779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1218.885302][T16993] hub 1-1:0.0: USB hub found [ 1218.919661][T18806] bpf: Bad value for 'gid' [ 1218.928009][T18806] IPv6: NLM_F_CREATE should be specified when creating new route [ 1218.936310][T18806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1218.943861][T18806] IPv6: NLM_F_CREATE should be set when creating new route [ 1218.951166][T18806] IPv6: NLM_F_CREATE should be set when creating new route [ 1218.983446][ T9443] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.994151][ T9443] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1219.003440][ T9443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.015389][ T9443] usb 10-1: config 0 descriptor?? [ 1219.025910][ T9443] pwc: Askey VC010 type 2 USB webcam detected. [ 1219.091043][T16994] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1219.127986][T16993] hub 1-1:0.0: 2 ports detected [ 1219.140976][ T978] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1219.244147][T16994] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1219.254133][T16994] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1219.264509][T16994] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1219.279308][T16994] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1219.287950][T16994] usb 7-1: Product: syz [ 1219.292657][T16994] usb 7-1: Manufacturer: syz [ 1219.297273][T16994] usb 7-1: SerialNumber: syz [ 1219.300934][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1219.304933][T16994] usb 7-1: config 0 descriptor?? [ 1219.313768][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1219.317890][T16994] usb 7-1: selecting invalid altsetting 0 [ 1219.334335][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1219.347818][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1219.366581][ T978] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1219.376159][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.390447][ T978] usb 2-1: Product: syz [ 1219.399107][ T978] usb 2-1: Manufacturer: syz [ 1219.408025][ T978] usb 2-1: SerialNumber: syz [ 1219.415244][ T978] usb 2-1: config 0 descriptor?? [ 1219.426938][ T9443] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1219.427636][ T978] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1219.444956][ T978] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 1219.455614][ T9443] pwc: recv_control_msg error -32 req 02 val 2700 [ 1219.465668][ T9443] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1219.473981][ T9443] pwc: recv_control_msg error -32 req 04 val 1000 [ 1219.483868][ T9443] pwc: recv_control_msg error -32 req 04 val 1300 [ 1219.490986][ T9443] pwc: recv_control_msg error -32 req 04 val 1400 [ 1219.497996][ T9443] pwc: recv_control_msg error -32 req 02 val 2000 [ 1219.506990][ T9443] pwc: recv_control_msg error -32 req 02 val 2100 [ 1219.516739][ T9443] pwc: recv_control_msg error -32 req 04 val 1500 [ 1219.532868][T18778] input: syz1 as /devices/virtual/input/input87 [ 1219.569090][T16993] hub 1-1:0.0: set hub depth failed [ 1219.581663][ T9443] pwc: recv_control_msg error -32 req 02 val 2500 [ 1219.600382][T16993] usb 1-1: USB disconnect, device number 39 [ 1219.691166][T18803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.721166][ T9443] pwc: recv_control_msg error -71 req 02 val 2400 [ 1219.722727][T18803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.744538][ T9443] pwc: recv_control_msg error -71 req 02 val 2600 [ 1219.759521][ T9443] pwc: recv_control_msg error -71 req 02 val 2900 [ 1219.766986][ T9443] pwc: recv_control_msg error -71 req 02 val 2800 [ 1219.779256][T16994] usb 7-1: USB disconnect, device number 57 [ 1219.805576][ T9443] pwc: recv_control_msg error -71 req 04 val 1100 [ 1219.832171][ T9443] pwc: recv_control_msg error -71 req 04 val 1200 [ 1219.859121][ T9443] pwc: Registered as video103. [ 1219.881404][ T9443] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input88 [ 1219.936644][ T9443] usb 10-1: USB disconnect, device number 73 [ 1220.130602][ T978] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1220.443729][ T30] audit: type=1400 audit(2000000208.019:1218): avc: denied { getopt } for pid=18819 comm="syz.0.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1220.543806][ T978] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1220.912931][ T978] em28xx 2-1:0.0: board has no eeprom [ 1221.971787][ T978] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1222.037267][ T978] em28xx 2-1:0.0: dvb set to isoc mode. [ 1222.051483][T18832] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2888'. [ 1222.062502][ T9516] em28xx 2-1:0.0: Binding DVB extension [ 1222.074287][ T978] usb 2-1: USB disconnect, device number 73 [ 1222.080675][ T978] em28xx 2-1:0.0: Disconnecting em28xx [ 1222.201304][ T9516] em28xx 2-1:0.0: Registering input extension [ 1222.217653][ T978] em28xx 2-1:0.0: Closing input extension [ 1222.240386][ T978] em28xx 2-1:0.0: Freeing device [ 1222.541241][ T9531] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1222.692604][ T9531] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1222.709168][ T9531] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1222.745037][ T9531] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1222.859443][ T9531] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1222.872283][ T9531] usb 10-1: Product: syz [ 1222.876993][ T9531] usb 10-1: Manufacturer: syz [ 1222.882418][ T9531] usb 10-1: SerialNumber: syz [ 1222.921496][ T9531] usb 10-1: config 0 descriptor?? [ 1222.935548][ T9531] usb 10-1: selecting invalid altsetting 0 [ 1222.953801][T18847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=18847 comm=syz.0.2890 [ 1223.056585][T18849] vcan1: entered allmulticast mode [ 1223.402666][T18850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.428231][T18850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.497995][ T9443] usb 10-1: USB disconnect, device number 74 [ 1224.102933][T18866] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2895'. [ 1225.071071][ T978] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1225.556794][ T978] usb 7-1: config 1 has an invalid interface number: 253 but max is 1 [ 1225.574799][ T978] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.588216][T18880] lo speed is unknown, defaulting to 1000 [ 1225.595362][T18881] futex_wake_op: syz.9.2902 tries to shift op by -1; fix this program [ 1225.597846][ T978] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 1225.640935][ T978] usb 7-1: config 1 has no interface number 2 [ 1225.651521][ T978] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.664165][ T978] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1225.677253][ T9516] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1225.685580][ T978] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1225.699328][ T978] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1225.708989][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.717614][ T978] usb 7-1: Product: syz [ 1225.722276][ T978] usb 7-1: Manufacturer: syz [ 1225.726953][ T978] usb 7-1: SerialNumber: syz [ 1225.755050][ T978] cdc_ncm 7-1:1.253: CDC Union missing and no IAD found [ 1225.762170][ T978] cdc_ncm 7-1:1.253: bind() failure [ 1225.830941][ T9516] usb 1-1: Using ep0 maxpacket: 16 [ 1225.839548][ T9516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1225.855615][ T9516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1225.867022][ T9516] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1225.880106][ T9443] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1225.901364][ T9516] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1225.918746][ T9516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.927188][ T9516] usb 1-1: Product: syz [ 1225.939067][ T9516] usb 1-1: Manufacturer: syz [ 1226.078303][T18872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.093379][T18872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.101632][ T9516] usb 1-1: SerialNumber: syz [ 1226.181225][T18893] netlink: 204732 bytes leftover after parsing attributes in process `syz.9.2905'. [ 1226.474811][ T9443] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.489760][ T9443] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1226.503938][ T9516] usb 1-1: config 0 descriptor?? [ 1226.512432][ T9443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.524908][ T9516] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1226.534694][ T9516] em28xx 1-1:0.0: DVB interface 0 found: isoc [ 1226.592098][ T9443] usb 2-1: config 0 descriptor?? [ 1226.599617][ T9443] pwc: Askey VC010 type 2 USB webcam detected. [ 1226.719269][T16993] usb 7-1: USB disconnect, device number 58 [ 1227.010136][ T9443] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1227.018279][ T9443] pwc: recv_control_msg error -32 req 02 val 2700 [ 1227.049268][ T9443] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1227.058653][ T9443] pwc: recv_control_msg error -32 req 04 val 1000 [ 1227.068898][ T9443] pwc: recv_control_msg error -32 req 04 val 1300 [ 1227.076240][ T9443] pwc: recv_control_msg error -32 req 04 val 1400 [ 1227.084732][ T9443] pwc: recv_control_msg error -32 req 02 val 2000 [ 1227.092300][ T9443] pwc: recv_control_msg error -32 req 02 val 2100 [ 1227.099663][ T9443] pwc: recv_control_msg error -32 req 04 val 1500 [ 1227.126890][ T9443] pwc: recv_control_msg error -32 req 02 val 2500 [ 1227.232909][ T9516] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1227.316490][ T9443] pwc: recv_control_msg error -32 req 02 val 2600 [ 1227.324500][ T9443] pwc: recv_control_msg error -32 req 02 val 2900 [ 1227.570227][T18906] syz.6.2908 (18906): drop_caches: 2 [ 1227.923445][ T9516] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1228.023935][ T9443] pwc: recv_control_msg error -71 req 04 val 1100 [ 1228.040538][ T9516] em28xx 1-1:0.0: board has no eeprom [ 1228.041913][ T9443] pwc: recv_control_msg error -71 req 04 val 1200 [ 1228.074676][ T9443] pwc: Registered as video103. [ 1228.242295][ T9443] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input90 [ 1228.282911][ T9443] usb 2-1: USB disconnect, device number 74 [ 1228.515418][T18607] udevd[18607]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1228.581282][T16994] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1228.755617][T16994] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.776330][T16994] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1228.796566][T16994] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.826203][T16994] usb 7-1: config 0 descriptor?? [ 1228.855304][T16994] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.134389][T18878] em28xx 1-1:0.0: writing to i2c device at 0x8 failed (error=-5) [ 1229.191347][ T9516] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1229.209457][ T9516] em28xx 1-1:0.0: dvb set to isoc mode. [ 1229.225845][T16999] em28xx 1-1:0.0: Binding DVB extension [ 1229.255140][ T9516] usb 1-1: USB disconnect, device number 40 [ 1229.267629][T16994] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1229.301042][T16994] pwc: recv_control_msg error -32 req 02 val 2700 [ 1229.323478][T16994] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1229.324283][ T9516] em28xx 1-1:0.0: Disconnecting em28xx [ 1229.347692][T16999] em28xx 1-1:0.0: Registering input extension [ 1229.350800][T16994] pwc: recv_control_msg error -32 req 04 val 1000 [ 1229.361076][ T9516] em28xx 1-1:0.0: Closing input extension [ 1229.382168][T16994] pwc: recv_control_msg error -32 req 04 val 1300 [ 1229.382716][ T9516] em28xx 1-1:0.0: Freeing device [ 1229.397895][T16994] pwc: recv_control_msg error -32 req 04 val 1400 [ 1229.405235][ T9443] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1229.418506][T16994] pwc: recv_control_msg error -32 req 02 val 2000 [ 1229.426707][T16994] pwc: recv_control_msg error -32 req 02 val 2100 [ 1229.435877][T16994] pwc: recv_control_msg error -32 req 04 val 1500 [ 1229.453043][T16994] pwc: recv_control_msg error -32 req 02 val 2500 [ 1229.605083][ T9443] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.646594][ T9443] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.669847][T16994] pwc: recv_control_msg error -71 req 02 val 2400 [ 1229.689849][ T9443] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.698728][T16994] pwc: recv_control_msg error -71 req 02 val 2600 [ 1229.726409][T16994] pwc: recv_control_msg error -71 req 02 val 2900 [ 1229.747335][ T9443] usb 10-1: config 0 descriptor?? [ 1229.767154][T16994] pwc: recv_control_msg error -71 req 02 val 2800 [ 1229.782822][ T9443] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.792570][T16999] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1229.810176][T16994] pwc: recv_control_msg error -71 req 04 val 1100 [ 1229.830419][T16994] pwc: recv_control_msg error -71 req 04 val 1200 [ 1229.854431][T16994] pwc: Registered as video103. [ 1229.871860][T16994] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input92 [ 1229.911253][T16994] usb 7-1: USB disconnect, device number 59 [ 1230.051974][T16999] usb 8-1: config 252 has an invalid interface number: 163 but max is 0 [ 1230.060348][T16999] usb 8-1: config 252 has no interface number 0 [ 1230.123484][T16999] usb 8-1: config 252 interface 163 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1230.170931][T16999] usb 8-1: config 252 interface 163 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 1230.195624][ T9443] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.213187][T16999] usb 8-1: config 252 interface 163 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1230.231865][ T9443] pwc: recv_control_msg error -32 req 02 val 2700 [ 1230.504911][ T9443] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1231.091617][T16999] usb 8-1: config 252 interface 163 has no altsetting 0 [ 1231.171360][T16999] usb 8-1: New USB device found, idVendor=0bfd, idProduct=000e, bcdDevice=c9.a8 [ 1231.180423][T16999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.206742][T18941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2919'. [ 1231.280985][ T9443] pwc: recv_control_msg error -71 req 04 val 1000 [ 1231.310965][T16999] usb 8-1: Product: syz [ 1231.315157][T16999] usb 8-1: Manufacturer: syz [ 1231.361402][ T9443] pwc: recv_control_msg error -71 req 04 val 1300 [ 1231.363162][T16999] usb 8-1: SerialNumber: syz [ 1231.381282][ T9443] pwc: recv_control_msg error -71 req 04 val 1400 [ 1231.408136][ T9443] pwc: recv_control_msg error -71 req 02 val 2000 [ 1231.435489][T16999] kvaser_usb 8-1:252.163: error -ENODEV: Cannot get usb endpoint(s) [ 1231.463899][ T9443] pwc: recv_control_msg error -71 req 02 val 2100 [ 1231.491756][ T9443] pwc: recv_control_msg error -71 req 04 val 1500 [ 1231.529486][ T9443] pwc: recv_control_msg error -71 req 02 val 2500 [ 1231.577300][ T9443] pwc: recv_control_msg error -71 req 02 val 2400 [ 1231.611191][ T9443] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.767349][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2916'. [ 1231.871964][ T9443] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.878803][ T9443] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.912571][T18931] netlink: 'syz.7.2916': attribute type 3 has an invalid length. [ 1231.922025][ T9443] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.941911][ T9443] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.983141][ T9443] pwc: Registered as video103. [ 1232.022999][ T9443] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input93 [ 1232.091383][ T9443] usb 10-1: USB disconnect, device number 75 [ 1232.223989][T18960] netlink: 560 bytes leftover after parsing attributes in process `syz.9.2923'. [ 1233.406642][T16994] usb 8-1: USB disconnect, device number 58 [ 1233.496885][ T9516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9516 comm=kworker/1:5 [ 1233.521096][ T30] audit: type=1400 audit(2000000221.129:1219): avc: denied { mounton } for pid=18972 comm="syz.0.2927" path="/syzcgroup/net/syz0/devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1233.668950][T18978] pim6reg9: entered allmulticast mode [ 1234.355182][T18987] FAULT_INJECTION: forcing a failure. [ 1234.355182][T18987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.378503][T18987] CPU: 1 UID: 0 PID: 18987 Comm: syz.0.2931 Not tainted syzkaller #0 PREEMPT(full) [ 1234.378528][T18987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1234.378538][T18987] Call Trace: [ 1234.378545][T18987] [ 1234.378553][T18987] dump_stack_lvl+0x16c/0x1f0 [ 1234.378581][T18987] should_fail_ex+0x512/0x640 [ 1234.378606][T18987] _copy_from_iter+0x29f/0x1720 [ 1234.378633][T18987] ? __alloc_skb+0x200/0x380 [ 1234.378653][T18987] ? __pfx__copy_from_iter+0x10/0x10 [ 1234.378679][T18987] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1234.378707][T18987] netlink_sendmsg+0x829/0xdd0 [ 1234.378734][T18987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.378765][T18987] ____sys_sendmsg+0xa98/0xc70 [ 1234.378791][T18987] ? copy_msghdr_from_user+0x10a/0x160 [ 1234.378810][T18987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.378846][T18987] ___sys_sendmsg+0x134/0x1d0 [ 1234.378868][T18987] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.378918][T18987] __sys_sendmsg+0x16d/0x220 [ 1234.378940][T18987] ? __pfx___sys_sendmsg+0x10/0x10 [ 1234.378978][T18987] do_syscall_64+0xcd/0x4e0 [ 1234.379003][T18987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.379021][T18987] RIP: 0033:0x7ff4f578eec9 [ 1234.379036][T18987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.379053][T18987] RSP: 002b:00007ff4f6653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.379076][T18987] RAX: ffffffffffffffda RBX: 00007ff4f59e5fa0 RCX: 00007ff4f578eec9 [ 1234.379087][T18987] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1234.379097][T18987] RBP: 00007ff4f6653090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.379108][T18987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.379117][T18987] R13: 00007ff4f59e6038 R14: 00007ff4f59e5fa0 R15: 00007ffeab334188 [ 1234.379142][T18987] [ 1234.583907][T16999] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1234.808267][ T9516] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1234.832334][T16999] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.300964][T16999] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1235.417919][T16999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.440616][T16999] usb 7-1: config 0 descriptor?? [ 1235.445640][ T9516] usb 10-1: Using ep0 maxpacket: 16 [ 1235.484226][ T9516] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 1235.513212][T16999] pwc: Askey VC010 type 2 USB webcam detected. [ 1235.542229][ T9516] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 1235.566517][ T9516] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1235.692852][ T9516] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1235.702476][ T9516] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.712914][ T9516] usb 10-1: Product: syz [ 1235.717262][ T9516] usb 10-1: Manufacturer: syz [ 1235.730903][ T9516] usb 10-1: SerialNumber: syz [ 1235.743750][ T9516] usb 10-1: config 0 descriptor?? [ 1235.924896][T16999] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1235.995150][T16999] pwc: recv_control_msg error -32 req 02 val 2700 [ 1236.002598][T16999] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1236.009751][T16999] pwc: recv_control_msg error -32 req 04 val 1000 [ 1236.018308][T16999] pwc: recv_control_msg error -32 req 04 val 1300 [ 1236.027611][T16999] pwc: recv_control_msg error -32 req 04 val 1400 [ 1236.035044][T16999] pwc: recv_control_msg error -32 req 02 val 2000 [ 1236.042140][T16999] pwc: recv_control_msg error -32 req 02 val 2100 [ 1236.049126][T16999] pwc: recv_control_msg error -32 req 04 val 1500 [ 1236.065770][T16999] pwc: recv_control_msg error -32 req 02 val 2500 [ 1236.093517][ T9516] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1236.249883][ T9516] em28xx 10-1:0.0: DVB interface 0 found: isoc [ 1236.267670][T16999] pwc: recv_control_msg error -32 req 02 val 2600 [ 1236.274977][T16999] pwc: recv_control_msg error -32 req 02 val 2900 [ 1236.482692][T16999] pwc: recv_control_msg error -71 req 04 val 1100 [ 1236.498445][T16999] pwc: recv_control_msg error -71 req 04 val 1200 [ 1236.517248][T16999] pwc: Registered as video103. [ 1236.535898][T16999] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input94 [ 1236.582981][T16999] usb 7-1: USB disconnect, device number 60 [ 1236.668587][ T9516] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1236.984469][T19013] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.2937'. [ 1237.386466][ T9516] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1237.405384][ T9516] em28xx 10-1:0.0: board has no eeprom [ 1237.523814][ T30] audit: type=1400 audit(2000000225.149:1220): avc: denied { execute } for pid=19014 comm="syz.7.2938" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1238.133870][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.141839][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.149603][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.157412][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.165184][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.173009][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.180822][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.188602][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.196392][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.204179][T19024] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1238.260898][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.267361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.584895][ T9516] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1238.676396][ T9516] em28xx 10-1:0.0: dvb set to isoc mode. [ 1238.733724][ T24] em28xx 10-1:0.0: Binding DVB extension [ 1238.782723][ T9516] usb 10-1: USB disconnect, device number 76 [ 1238.805326][ T9516] em28xx 10-1:0.0: Disconnecting em28xx [ 1238.868174][ T24] em28xx 10-1:0.0: Registering input extension [ 1238.891275][ T9516] em28xx 10-1:0.0: Closing input extension [ 1238.940237][ T9516] em28xx 10-1:0.0: Freeing device [ 1240.937239][T19056] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2947'. [ 1242.060977][ T9516] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1242.230558][ T9516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.284816][ T9516] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1242.304157][ T9516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.329814][ T9516] usb 1-1: config 0 descriptor?? [ 1242.419101][ T9516] pwc: Askey VC010 type 2 USB webcam detected. [ 1243.175778][ T9516] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1243.293085][ T9516] pwc: recv_control_msg error -32 req 02 val 2700 [ 1243.327372][T19083] syzkaller0: entered promiscuous mode [ 1243.333042][T19083] syzkaller0: entered allmulticast mode [ 1243.428537][ T9516] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1243.446670][ T9516] pwc: recv_control_msg error -32 req 04 val 1000 [ 1243.547278][ T9516] pwc: recv_control_msg error -32 req 04 val 1300 [ 1243.555246][ T9516] pwc: recv_control_msg error -32 req 04 val 1400 [ 1243.578687][ T9516] pwc: recv_control_msg error -32 req 02 val 2000 [ 1243.593068][ T9516] pwc: recv_control_msg error -32 req 02 val 2100 [ 1243.600815][ T9516] pwc: recv_control_msg error -32 req 04 val 1500 [ 1243.615982][ T9516] pwc: recv_control_msg error -32 req 02 val 2500 [ 1243.785459][ T978] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1243.799092][ T9516] pwc: recv_control_msg error -32 req 02 val 2600 [ 1243.809584][ T9516] pwc: recv_control_msg error -32 req 02 val 2900 [ 1243.972587][ T978] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1243.994020][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.010293][ T978] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1244.019722][ T978] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1244.027995][ T978] usb 2-1: Product: syz [ 1244.032519][ T978] usb 2-1: Manufacturer: syz [ 1244.037156][ T978] usb 2-1: SerialNumber: syz [ 1244.044324][ T9516] pwc: recv_control_msg error -71 req 04 val 1100 [ 1244.053670][ T9516] pwc: recv_control_msg error -71 req 04 val 1200 [ 1244.082647][ T9516] pwc: Registered as video103. [ 1244.118270][ T978] usb 2-1: config 0 descriptor?? [ 1244.133055][ T9516] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input96 [ 1244.302533][ T978] usb 2-1: selecting invalid altsetting 0 [ 1244.334135][ T9516] usb 1-1: USB disconnect, device number 41 [ 1244.614980][T19086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.630611][T19086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.675925][ T978] usb 2-1: USB disconnect, device number 75 [ 1244.813329][T19099] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2958'. [ 1244.888464][ T30] audit: type=1400 audit(2000000232.524:1221): avc: denied { ioctl } for pid=19098 comm="syz.7.2958" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1245.288558][T19106] ================================================================== [ 1245.288573][T19106] BUG: KASAN: slab-out-of-bounds in fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.288602][T19106] Read of size 1 at addr ffff88807aa794e4 by task syz.0.2959/19106 [ 1245.288618][T19106] [ 1245.288627][T19106] CPU: 0 UID: 0 PID: 19106 Comm: syz.0.2959 Not tainted syzkaller #0 PREEMPT(full) [ 1245.288646][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1245.288655][T19106] Call Trace: [ 1245.288659][T19106] [ 1245.288666][T19106] dump_stack_lvl+0x116/0x1f0 [ 1245.288686][T19106] print_report+0xcd/0x630 [ 1245.288702][T19106] ? __virt_addr_valid+0x81/0x610 [ 1245.288720][T19106] ? __phys_addr+0xe8/0x180 [ 1245.288739][T19106] ? fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.288754][T19106] kasan_report+0xe0/0x110 [ 1245.288769][T19106] ? fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.288786][T19106] fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.288804][T19106] bit_putcs+0x870/0xde0 [ 1245.288827][T19106] ? __pfx_bit_putcs+0x10/0x10 [ 1245.288842][T19106] ? find_held_lock+0x2b/0x80 [ 1245.288861][T19106] ? fb_get_color_depth+0x120/0x250 [ 1245.288876][T19106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1245.288893][T19106] ? __pfx_bit_putcs+0x10/0x10 [ 1245.288909][T19106] fbcon_putcs+0x384/0x4a0 [ 1245.288923][T19106] ? __pfx_fbcon_putcs+0x10/0x10 [ 1245.288937][T19106] do_con_write+0xfed/0x8280 [ 1245.288955][T19106] ? call_rcu_tasks_generic+0x7a0/0x920 [ 1245.288980][T19106] ? __pfx___mutex_lock+0x10/0x10 [ 1245.289003][T19106] ? __pfx_do_con_write+0x10/0x10 [ 1245.289020][T19106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1245.289042][T19106] con_write+0x23/0xb0 [ 1245.289058][T19106] n_tty_write+0x41f/0x11e0 [ 1245.289081][T19106] ? __pfx_n_tty_write+0x10/0x10 [ 1245.289101][T19106] ? __pfx_woken_wake_function+0x10/0x10 [ 1245.289117][T19106] ? __pfx___might_resched+0x10/0x10 [ 1245.289136][T19106] ? __pfx_n_tty_write+0x10/0x10 [ 1245.289156][T19106] file_tty_write.constprop.0+0x504/0x9b0 [ 1245.289179][T19106] vfs_write+0x7d0/0x11d0 [ 1245.289194][T19106] ? __pfx_tty_write+0x10/0x10 [ 1245.289211][T19106] ? __pfx_vfs_write+0x10/0x10 [ 1245.289224][T19106] ? find_held_lock+0x2b/0x80 [ 1245.289248][T19106] ksys_write+0x12a/0x250 [ 1245.289262][T19106] ? __pfx_ksys_write+0x10/0x10 [ 1245.289279][T19106] do_syscall_64+0xcd/0x4e0 [ 1245.289299][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.289313][T19106] RIP: 0033:0x7ff4f578eec9 [ 1245.289324][T19106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.289338][T19106] RSP: 002b:00007ff4f65f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1245.289352][T19106] RAX: ffffffffffffffda RBX: 00007ff4f59e6270 RCX: 00007ff4f578eec9 [ 1245.289362][T19106] RDX: 0000000000001066 RSI: 0000200000001640 RDI: 000000000000000b [ 1245.289371][T19106] RBP: 00007ff4f5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1245.289379][T19106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.289387][T19106] R13: 00007ff4f59e6308 R14: 00007ff4f59e6270 R15: 00007ffeab334188 [ 1245.289401][T19106] [ 1245.289406][T19106] [ 1245.289409][T19106] Allocated by task 10203: [ 1245.289416][T19106] kasan_save_stack+0x33/0x60 [ 1245.289428][T19106] kasan_save_track+0x14/0x30 [ 1245.289440][T19106] __kasan_kmalloc+0xaa/0xb0 [ 1245.289452][T19106] __kmalloc_noprof+0x223/0x510 [ 1245.289465][T19106] fbcon_set_font+0x42e/0xc90 [ 1245.289477][T19106] con_font_op+0x7fe/0xf50 [ 1245.289492][T19106] vt_ioctl+0x48f/0x30a0 [ 1245.289512][T19106] tty_ioctl+0x65e/0x1680 [ 1245.289526][T19106] __x64_sys_ioctl+0x18b/0x210 [ 1245.289545][T19106] do_syscall_64+0xcd/0x4e0 [ 1245.289561][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.289574][T19106] [ 1245.289577][T19106] The buggy address belongs to the object at ffff88807aa79000 [ 1245.289577][T19106] which belongs to the cache kmalloc-1k of size 1024 [ 1245.289588][T19106] The buggy address is located 468 bytes to the right of [ 1245.289588][T19106] allocated 784-byte region [ffff88807aa79000, ffff88807aa79310) [ 1245.289602][T19106] [ 1245.289606][T19106] The buggy address belongs to the physical page: [ 1245.289613][T19106] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807aa7f000 pfn:0x7aa78 [ 1245.289626][T19106] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1245.289637][T19106] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1245.289651][T19106] page_type: f5(slab) [ 1245.289663][T19106] raw: 00fff00000000240 ffff88801b841dc0 ffffea00016ec410 ffffea0001e11810 [ 1245.289676][T19106] raw: ffff88807aa7f000 0000000000100001 00000000f5000000 0000000000000000 [ 1245.289689][T19106] head: 00fff00000000240 ffff88801b841dc0 ffffea00016ec410 ffffea0001e11810 [ 1245.289702][T19106] head: ffff88807aa7f000 0000000000100001 00000000f5000000 0000000000000000 [ 1245.289715][T19106] head: 00fff00000000003 ffffea0001ea9e01 00000000ffffffff 00000000ffffffff [ 1245.289727][T19106] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1245.289735][T19106] page dumped because: kasan: bad access detected [ 1245.289741][T19106] page_owner tracks the page as allocated [ 1245.289746][T19106] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 49, tgid 49 (kworker/u8:3), ts 200758272638, free_ts 200214474286 [ 1245.289768][T19106] post_alloc_hook+0x1c0/0x230 [ 1245.289789][T19106] get_page_from_freelist+0x132b/0x38e0 [ 1245.289801][T19106] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1245.289815][T19106] alloc_pages_mpol+0x1fb/0x550 [ 1245.289829][T19106] new_slab+0x247/0x330 [ 1245.289847][T19106] ___slab_alloc+0xcf2/0x1750 [ 1245.289865][T19106] __slab_alloc.constprop.0+0x56/0xb0 [ 1245.289884][T19106] __kmalloc_noprof+0x2f2/0x510 [ 1245.289895][T19106] ieee802_11_parse_elems_full+0x1db/0x3780 [ 1245.289911][T19106] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 1245.289932][T19106] ieee80211_iface_work+0xe2e/0x1360 [ 1245.289944][T19106] cfg80211_wiphy_work+0x2c4/0x580 [ 1245.289960][T19106] process_one_work+0x9cc/0x1b70 [ 1245.289975][T19106] worker_thread+0x6c8/0xf10 [ 1245.289988][T19106] kthread+0x3c2/0x780 [ 1245.290005][T19106] ret_from_fork+0x56a/0x730 [ 1245.290017][T19106] page last free pid 7706 tgid 7704 stack trace: [ 1245.290025][T19106] __free_frozen_pages+0x7d5/0x10f0 [ 1245.290043][T19106] qlist_free_all+0x4d/0x120 [ 1245.290054][T19106] kasan_quarantine_reduce+0x195/0x1e0 [ 1245.290066][T19106] __kasan_slab_alloc+0x69/0x90 [ 1245.290079][T19106] __kmalloc_node_noprof+0x1d0/0x500 [ 1245.290092][T19106] alloc_slab_obj_exts+0x41/0xa0 [ 1245.290111][T19106] __memcg_slab_post_alloc_hook+0x255/0x960 [ 1245.290126][T19106] kmem_cache_alloc_node_noprof+0x312/0x3b0 [ 1245.290139][T19106] __alloc_skb+0x2b2/0x380 [ 1245.290153][T19106] alloc_skb_with_frags+0xe0/0x860 [ 1245.290169][T19106] sock_alloc_send_pskb+0x7fb/0x990 [ 1245.290184][T19106] unix_dgram_sendmsg+0x3e9/0x17f0 [ 1245.290201][T19106] ____sys_sendmsg+0xa98/0xc70 [ 1245.290220][T19106] ___sys_sendmsg+0x134/0x1d0 [ 1245.290234][T19106] __sys_sendmmsg+0x200/0x420 [ 1245.290249][T19106] __x64_sys_sendmmsg+0x9c/0x100 [ 1245.290264][T19106] [ 1245.290267][T19106] Memory state around the buggy address: [ 1245.290274][T19106] ffff88807aa79380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.290284][T19106] ffff88807aa79400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.290293][T19106] >ffff88807aa79480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.290301][T19106] ^ [ 1245.290308][T19106] ffff88807aa79500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.290318][T19106] ffff88807aa79580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1245.290326][T19106] ================================================================== [ 1245.290443][T19106] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1245.290455][T19106] CPU: 0 UID: 0 PID: 19106 Comm: syz.0.2959 Not tainted syzkaller #0 PREEMPT(full) [ 1245.290476][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1245.290488][T19106] Call Trace: [ 1245.290494][T19106] [ 1245.290502][T19106] dump_stack_lvl+0x3d/0x1f0 [ 1245.290526][T19106] vpanic+0x6e8/0x7a0 [ 1245.290542][T19106] ? __pfx_vpanic+0x10/0x10 [ 1245.290558][T19106] ? __pfx_vprintk_emit+0x10/0x10 [ 1245.290584][T19106] ? fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.290604][T19106] panic+0xca/0xd0 [ 1245.290619][T19106] ? __pfx_panic+0x10/0x10 [ 1245.290635][T19106] ? fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.290656][T19106] ? preempt_schedule_common+0x44/0xc0 [ 1245.290679][T19106] ? preempt_schedule_thunk+0x16/0x30 [ 1245.290703][T19106] check_panic_on_warn+0xab/0xb0 [ 1245.290717][T19106] end_report+0x107/0x170 [ 1245.290732][T19106] kasan_report+0xee/0x110 [ 1245.290748][T19106] ? fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.290766][T19106] fb_pad_unaligned_buffer+0x3b8/0x440 [ 1245.290784][T19106] bit_putcs+0x870/0xde0 [ 1245.290805][T19106] ? __pfx_bit_putcs+0x10/0x10 [ 1245.290821][T19106] ? find_held_lock+0x2b/0x80 [ 1245.290843][T19106] ? fb_get_color_depth+0x120/0x250 [ 1245.290859][T19106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1245.290878][T19106] ? __pfx_bit_putcs+0x10/0x10 [ 1245.290894][T19106] fbcon_putcs+0x384/0x4a0 [ 1245.290908][T19106] ? __pfx_fbcon_putcs+0x10/0x10 [ 1245.290923][T19106] do_con_write+0xfed/0x8280 [ 1245.290940][T19106] ? call_rcu_tasks_generic+0x7a0/0x920 [ 1245.290966][T19106] ? __pfx___mutex_lock+0x10/0x10 [ 1245.290984][T19106] ? __pfx_do_con_write+0x10/0x10 [ 1245.291008][T19106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1245.291030][T19106] con_write+0x23/0xb0 [ 1245.291046][T19106] n_tty_write+0x41f/0x11e0 [ 1245.291069][T19106] ? __pfx_n_tty_write+0x10/0x10 [ 1245.291089][T19106] ? __pfx_woken_wake_function+0x10/0x10 [ 1245.291106][T19106] ? __pfx___might_resched+0x10/0x10 [ 1245.291123][T19106] ? __pfx_n_tty_write+0x10/0x10 [ 1245.291143][T19106] file_tty_write.constprop.0+0x504/0x9b0 [ 1245.291162][T19106] vfs_write+0x7d0/0x11d0 [ 1245.291176][T19106] ? __pfx_tty_write+0x10/0x10 [ 1245.291192][T19106] ? __pfx_vfs_write+0x10/0x10 [ 1245.291205][T19106] ? find_held_lock+0x2b/0x80 [ 1245.291226][T19106] ksys_write+0x12a/0x250 [ 1245.291240][T19106] ? __pfx_ksys_write+0x10/0x10 [ 1245.291256][T19106] do_syscall_64+0xcd/0x4e0 [ 1245.291274][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.291288][T19106] RIP: 0033:0x7ff4f578eec9 [ 1245.291298][T19106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.291311][T19106] RSP: 002b:00007ff4f65f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1245.291324][T19106] RAX: ffffffffffffffda RBX: 00007ff4f59e6270 RCX: 00007ff4f578eec9 [ 1245.291334][T19106] RDX: 0000000000001066 RSI: 0000200000001640 RDI: 000000000000000b [ 1245.291343][T19106] RBP: 00007ff4f5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1245.291352][T19106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.291360][T19106] R13: 00007ff4f59e6308 R14: 00007ff4f59e6270 R15: 00007ffeab334188 [ 1245.291374][T19106] [ 1245.291565][T19106] Kernel Offset: disabled